Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer (raw, json)
Hash identifier: d0nHz4ykROjyOXSuaHncn4exsjx/iOCBvI2Rj5jY5/g=
Subject key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A06D263BC0AD62DDF1539822E9FB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13267
IP: 62.240.192.0/19
IP: 2a01:6360::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:06:d2:63:bc:0a:d6:2d:df:15:39:82:2e:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:19:fe:92:0d:32:95:7c:7c:1e:80:27:98:
fc:bd:48:07:87:91:a1:d1:bc:0f:8b:79:43:e8:b9:
42:46:3c:98:cc:bd:f0:a6:9e:a4:48:6c:77:56:69:
4f:ec:a8:a7:2b:7b:a4:9d:29:81:46:a8:63:38:94:
e5:4e:bd:41:fd:ab:45:6f:f2:34:51:fa:4f:9c:3f:
ba:34:d2:62:00:41:65:39:ef:fc:fc:47:cc:40:b7:
9b:94:66:48:6f:ac:3b:64:67:7e:09:49:e1:2f:86:
fd:96:e5:ea:0f:b5:48:da:2c:07:8a:be:af:c3:df:
fc:e2:9d:48:4f:6e:c8:27:eb:c5:1b:ba:01:10:6a:
36:46:d1:d6:31:d7:57:34:67:3a:d5:17:7b:4b:4c:
ce:64:83:87:ef:8f:b9:48:56:28:8b:1e:72:bf:fe:
0b:3d:02:9a:91:86:75:1a:38:c9:e1:ad:ff:9e:57:
4b:55:15:e2:07:18:3d:c9:fe:b1:c0:fd:95:04:ef:
d8:52:79:28:21:77:20:37:36:1d:24:6c:4b:99:89:
04:d3:d4:19:ba:94:2e:b3:81:20:ef:20:6f:24:4f:
f0:53:09:33:72:04:a7:e1:9f:58:73:2c:83:52:e6:
38:d6:fc:85:6b:10:59:7a:58:20:fb:25:bd:52:ea:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.192.0/19
IPv6:
2a01:6360::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13267
Signature Algorithm: sha256WithRSAEncryption
56:d0:af:da:40:8c:ac:eb:a2:60:2f:c4:58:09:7d:55:56:b6:
65:e0:02:99:f7:e1:fe:48:63:51:ce:cc:06:b3:2c:eb:b2:75:
6e:a4:80:90:0a:ee:35:b7:ba:52:66:a1:be:44:18:d2:ba:8a:
cc:8b:3e:9c:b6:df:37:6a:bf:89:6a:2d:8b:57:90:9e:ed:87:
eb:fa:24:5a:09:06:96:e7:8b:6b:6e:e8:fb:c1:37:dd:ba:00:
6a:31:d6:91:f9:32:57:e6:ee:3a:38:ec:46:48:e0:46:3b:e6:
dd:f7:f0:9a:b4:a7:ee:49:69:8c:a3:f3:34:0e:b0:98:36:51:
10:42:64:b6:b1:fa:d1:2d:7f:06:04:5e:9d:8a:d2:1a:b9:84:
d1:98:1b:df:26:45:dd:b1:25:8b:fc:a2:6f:9e:b9:62:3b:f1:
08:b0:c2:4f:6e:27:af:17:d2:ad:5b:06:7d:d5:3c:01:28:db:
79:c4:a1:04:5c:b9:a4:73:94:f5:0c:10:a4:76:b6:44:20:30:
00:de:c9:c4:01:62:70:e1:0a:ed:c3:6f:39:92:2c:1a:95:0d:
1b:af:16:98:aa:87:2f:a7:f9:a6:80:67:cf:ac:89:e3:d3:a1:
c4:6a:3e:25:a1:4a:da:9f:fa:20:40:bc:c7:d4:31:7e:74:ec:
71:95:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:03 2025 by rpki-client