Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
File: bO-kEfCTakZthB7CkM2AzFUKf24.cer (raw, json)
Hash identifier: Q+O1KXKelcCyK6dGnx+NH7VXz9szhYdx+2Eqhmhnq0M=
Subject key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427474EE4DA8AA0718D353D31CEBEC1D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210626
IP: 91.242.247.0/24
IP: 2a11:af40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4e:e4:da:8a:a0:71:8d:35:3d:31:ce:be:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:a0:9f:85:b0:7a:ae:7f:c5:3b:71:df:ac:
f8:94:26:7b:68:a6:ab:69:90:d3:13:52:93:25:4c:
47:3c:39:e9:08:f8:33:b7:66:62:76:75:85:51:08:
c9:12:14:6a:af:34:d2:4d:ce:b8:f3:b8:57:a8:61:
5b:6a:81:45:be:9c:f6:14:46:05:f1:db:67:ff:fc:
37:5c:fd:d0:0d:ee:a6:ea:b3:89:5a:9a:16:08:46:
f2:4c:54:d6:3b:9c:04:89:99:04:65:4a:0f:27:7a:
8b:a7:8c:4c:f5:a8:de:71:e4:a2:07:09:2e:f7:43:
a4:f2:49:50:1e:3e:d5:06:90:de:46:b9:81:4a:4a:
f9:5a:ee:b2:d3:ed:91:25:e4:47:40:be:9a:b2:65:
4d:c9:2d:76:76:a8:b4:c6:92:5b:02:e1:ac:cf:7c:
1f:c4:3a:b4:87:41:3b:4d:34:2c:77:2e:09:4b:2c:
5e:1d:13:e3:04:2c:04:86:3f:c4:bb:1a:da:5a:36:
27:5e:dc:2a:0b:57:c2:4f:24:ef:02:36:75:eb:62:
83:f0:2a:56:60:21:51:26:ed:0b:7f:8d:53:f6:fd:
a4:92:f2:8e:c1:45:f4:60:37:67:69:e8:f1:0f:be:
24:f7:c6:a2:88:55:cc:fd:99:bc:57:d8:99:2b:08:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.247.0/24
IPv6:
2a11:af40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210626
Signature Algorithm: sha256WithRSAEncryption
a9:e8:7d:19:3d:69:e2:eb:df:74:77:8f:e3:a1:cb:93:2a:2b:
d2:40:63:18:24:16:eb:9e:bf:d8:47:83:23:64:2b:22:36:e5:
ac:a4:8e:22:d8:ba:80:37:b9:f3:99:49:3e:68:88:6b:6a:99:
63:ec:27:0f:c2:3e:6f:63:a1:1a:60:91:47:11:24:c3:fb:c3:
2e:fb:91:cb:fa:ce:be:8b:9f:74:30:7c:ca:f0:23:9f:8f:ea:
81:d6:ec:72:4a:8b:70:81:98:77:65:76:12:ed:77:bc:59:33:
e2:4a:6c:2a:5b:cc:7b:89:e4:94:cd:fe:85:a5:16:d6:fc:3b:
4d:12:ea:a7:a2:ab:e7:9a:a0:e8:7b:a4:e5:cc:65:66:cb:97:
9d:a3:6a:13:d0:b6:87:87:af:7b:d3:a4:eb:9e:67:11:5a:1e:
9a:b3:c5:bf:54:4e:92:7c:0f:f0:b4:bf:e5:e7:6b:f8:3f:f3:
2d:f6:86:61:28:1e:ef:f1:b6:13:de:14:7f:50:ab:2b:e6:35:
4a:46:59:ca:b8:a9:57:f8:6c:aa:5e:df:6c:79:8c:86:27:78:
ad:50:8b:c5:ab:0e:b3:77:32:05:7b:76:b4:99:85:55:58:90:
f0:09:dd:ba:85:3b:5e:49:43:e9:43:48:18:cf:d2:fa:b3:8e:
9a:76:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:52 2025 by rpki-client