Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
File: b5jR-Z44M-9AHUY0juyLdSCIxV0.cer (raw, json)
Hash identifier: l61mB7ojafMGUz3PiUSsx8bKg1ILf888/GaO1EdGKH4=
Subject key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C460B6B593BE60B5C32E538EE0C93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56600
IP: 176.126.128.0/19
IP: 192.162.152.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:0b:6b:59:3b:e6:0b:5c:32:e5:38:ee:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:f0:84:ef:04:39:ad:79:78:7a:91:0c:1b:
33:58:16:c3:fa:fc:b4:eb:8c:2e:9d:7d:7d:f6:7b:
00:3b:4e:cc:00:46:2c:ed:82:59:fd:f7:10:5e:fe:
1f:d9:91:42:84:e2:2a:fe:d6:a8:1b:2d:a2:20:4f:
06:41:c3:16:64:b2:62:6c:75:a0:e2:79:a4:49:60:
45:1b:85:d9:c3:77:6f:0d:fa:da:17:c7:58:58:92:
04:4f:b7:85:1f:7c:51:41:52:32:7b:d2:a5:95:12:
17:3c:fe:4b:50:d6:0b:14:00:b9:ca:5b:71:e8:31:
00:a9:8f:a6:90:df:40:ea:de:ed:69:f6:4f:06:18:
cb:53:5c:c2:be:53:14:7b:19:56:73:08:06:80:4f:
6e:76:f7:8b:38:7c:15:59:97:ea:a3:b3:a7:87:04:
f8:f4:87:f9:ce:b0:c4:bc:5c:32:e4:fb:5b:3a:67:
60:52:19:e3:31:36:e2:4a:e5:dd:5c:4d:c5:59:a1:
9a:26:c2:b7:cf:ee:f7:6f:58:59:f2:19:d9:3d:c9:
08:4c:25:b4:bd:ec:39:ad:a3:19:3e:31:7c:43:e8:
cd:60:b3:1f:6e:b6:c3:56:c5:d0:51:0a:cd:31:4d:
dd:37:d2:18:77:be:3a:63:1d:d2:da:ff:6c:43:82:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.128.0/19
192.162.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56600
Signature Algorithm: sha256WithRSAEncryption
03:d7:94:d5:1f:31:d8:eb:80:48:85:a7:9f:a1:ef:0e:19:37:
ba:34:53:7f:47:66:5e:36:6c:da:5b:72:74:5b:c1:14:97:15:
a3:8d:3f:8d:5e:8a:fd:64:60:a3:27:1a:af:dc:79:1b:52:34:
0b:f3:21:09:77:c0:da:d2:79:b2:b4:df:53:1c:18:a0:62:f4:
89:9b:cc:83:51:1a:f6:f7:03:e2:97:ae:af:29:b4:50:2d:9f:
c5:ac:42:ec:47:37:b4:eb:9c:27:be:30:0e:49:ad:b5:13:63:
01:94:a4:60:80:4f:01:03:ef:a0:db:5c:4a:33:a3:1d:ad:66:
30:7e:e0:c5:28:98:10:ba:bc:58:b5:e1:01:f9:1a:61:77:22:
e9:11:6d:f6:88:f2:f1:db:be:5a:d0:e2:7c:37:1b:dd:b7:4b:
45:3b:03:a1:83:9c:b6:b2:b7:39:c8:21:62:01:6c:0c:36:8d:
9b:64:8e:08:a0:d5:5b:6a:8a:c9:a2:c7:22:ec:11:8e:a8:d4:
62:6f:a8:61:41:81:e3:9a:bc:bb:eb:e4:b4:dd:24:c0:fb:0f:
13:68:f6:f1:ee:73:6c:7c:5d:e8:39:fb:7e:2a:c8:af:e3:8d:
1b:95:02:1f:7f:ba:ec:20:ab:3a:73:b8:bf:bf:06:2e:38:e8:
33:98:a9:a9
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQfjEYLa1k75gtcMuU47gyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjk4ZDFmOTllMzgzM2VmNDAxZDQ2MzQ4ZWVjOGI3NTIwODhjNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLTwhO8EOa15eHqRDBszWBbD+vy0
64wunX199nsAO07MAEYs7YJZ/fcQXv4f2ZFChOIq/taoGy2iIE8GQcMWZLJibHWg
4nmkSWBFG4XZw3dvDfraF8dYWJIET7eFH3xRQVIye9KllRIXPP5LUNYLFAC5yltx
6DEAqY+mkN9A6t7tafZPBhjLU1zCvlMUexlWcwgGgE9udveLOHwVWZfqo7OnhwT4
9If5zrDEvFwy5PtbOmdgUhnjMTbiSuXdXE3FWaGaJsK3z+73b1hZ8hnZPckITCW0
vew5raMZPjF8Q+jNYLMfbrbDVsXQUQrNMU3dN9IYd746Yx3S2v9sQ4LmCwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFG+Y0fmeODPvQB1GNI7si3UgiMVdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzNjMDhm
MS05NmUwLTRjNTQtYTQ2Ni0wN2Q0YjExNWNjODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvM2MwOGYx
LTk2ZTAtNGM1NC1hNDY2LTA3ZDRiMTE1Y2M4Mi8xL2I1alItWjQ0TS05QUhVWTBq
dXlMZFNDSXhWMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQFsH6AAwQCwKKYMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDdGDANBgkqhkiG9w0BAQsFAAOCAQEAA9eU1R8x2OuASIWnn6HvDhk3
ujRTf0dmXjZs2ltydFvBFJcVo40/jV6K/WRgoycar9x5G1I0C/MhCXfA2tJ5srTf
UxwYoGL0iZvMg1Ea9vcD4peurym0UC2fxaxC7Ec3tOucJ74wDkmttRNjAZSkYIBP
AQPvoNtcSjOjHa1mMH7gxSiYELq8WLXhAfkaYXci6RFt9ojy8du+WtDifDcb3bdL
RTsDoYOctrK3OcghYgFsDDaNm2SOCKDVW2qKyaLHIuwRjqjUYm+oYUGB45q8u+vk
tN0kwPsPE2j28e5zbHxd6Dn7firIr+ONG5UCH3+67CCrOnO4v78GLjjoM5ipqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:45 2025 by rpki-client