Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.cer (raw, json)
Hash identifier: 3TZsVFbgwOBi7XTV5TvxHqwQtBd3IIQmBCEdEQTV+tk=
Subject key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBA0AF9C96EFF3BAB11847A84E1DF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196881
IP: 93.190.112.0/21
IP: 185.135.36.0/22
IP: 2a05:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a0:af:9c:96:ef:f3:ba:b1:18:47:a8:4e:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:3c:5b:8b:07:3f:28:ad:4c:41:fe:03:f1:
1a:b7:35:49:b3:9a:ed:ef:ce:d3:1c:f5:46:e2:ff:
25:a8:84:51:59:85:5b:c7:e3:45:a2:9c:6d:60:46:
ba:ed:e5:65:d9:c8:af:92:28:00:c0:26:f4:92:30:
83:55:45:36:ec:7d:ff:98:b2:17:58:48:df:af:90:
35:1a:be:ed:af:70:24:67:47:ea:be:84:ed:86:17:
ba:08:fe:51:ee:d9:49:3e:97:75:20:ed:65:21:86:
ec:4a:02:7a:fd:f6:6d:9b:ac:f8:62:0d:8d:1f:be:
8f:56:aa:ff:25:a7:57:cb:e2:8e:2f:13:55:fa:51:
09:dc:3f:9b:7b:43:4a:cc:f7:9a:fd:cc:aa:67:a4:
b8:53:48:3b:78:49:c5:9f:6b:10:25:8a:b4:65:52:
d3:bc:74:76:b7:16:57:03:a4:9f:f5:2f:7c:45:99:
22:66:8b:d1:0e:de:55:a5:bb:39:92:a2:7d:c2:8c:
6b:0b:d3:0f:55:fd:74:fa:ea:32:dd:11:70:39:2c:
f3:21:b9:e8:21:bc:c5:8d:20:b3:c7:93:19:20:c2:
c5:5f:af:cb:6b:80:28:4b:4a:77:45:bf:99:4c:e6:
2f:4b:91:a1:16:20:a5:9f:cb:87:48:bf:fd:ec:0b:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.112.0/21
185.135.36.0/22
IPv6:
2a05:5b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196881
Signature Algorithm: sha256WithRSAEncryption
90:46:46:b7:e2:02:09:f5:64:e0:72:0b:d5:38:d9:e7:8f:ff:
6a:be:39:f5:45:78:4d:4b:62:11:d9:b0:3c:7e:32:c5:da:57:
21:c5:04:77:97:92:e4:a1:b4:5a:39:a9:57:72:66:c2:55:49:
02:be:79:f7:84:e8:09:3c:5d:16:2b:52:b6:cf:d9:50:b6:66:
e1:56:2b:fe:84:52:de:37:b6:23:0e:f8:1a:1a:07:b3:90:ac:
f3:73:df:1f:d1:0a:7d:aa:c0:35:e4:0a:38:06:09:91:00:e6:
c3:41:d1:5c:4a:d5:f1:5a:36:c7:1f:ac:4b:06:4b:c4:6d:a5:
5c:9e:11:53:2b:00:2f:91:32:91:97:16:97:92:a7:e0:6c:97:
49:51:c6:77:4e:d3:d7:67:db:58:7d:a1:7b:4b:2e:33:39:e5:
23:c3:69:21:d5:a1:38:13:26:fc:ae:f7:7f:d1:84:98:e8:a7:
0b:20:80:0c:3e:41:85:aa:ac:86:19:2b:5d:27:c5:33:9f:f0:
05:c3:1d:4f:d1:dd:d8:19:bd:e4:06:e8:2e:81:ab:bc:0b:eb:
15:b7:8f:0f:4b:69:e9:5e:02:f7:d9:1f:7a:91:f4:bb:e7:c4:
12:24:b6:4b:b8:d9:a7:cd:b6:e7:d2:7f:ec:b1:3d:7a:13:43:
25:7b:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:22:48 2025 by rpki-client