Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer (raw, json)
Hash identifier: Lnlo3vwB+LhXIEGADZHEMw09ltJJ6YYhuhZ76iux7LQ=
Subject key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E47E9B92CB040489FC012301AA87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29317
IP: 195.137.210.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e4:7e:9b:92:cb:04:04:89:fc:01:23:01:aa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:bf:c8:62:6d:0a:95:14:13:86:b0:9c:91:
e0:66:b5:c6:14:fa:ea:45:a4:e8:fc:c3:5c:81:14:
40:93:02:78:16:af:52:a9:62:d3:36:0a:be:27:8e:
b0:7c:16:c1:ca:c5:6e:9f:51:fb:b6:6e:2a:f5:9c:
92:19:df:d6:49:77:c9:f2:2a:29:b7:c4:90:55:8a:
be:1f:62:47:bd:41:bb:16:a7:0b:f5:d3:3f:47:df:
01:38:1f:fa:94:86:37:d4:e9:19:47:30:69:df:2b:
4c:66:94:4d:64:33:ec:dc:a5:cf:4e:c5:8b:d7:ec:
14:e3:81:48:98:d1:6a:d8:bb:51:0b:d4:86:73:a7:
03:a5:09:a2:c3:38:14:c0:29:d1:2c:eb:6e:ca:f2:
cd:ee:03:e9:32:46:0f:30:10:55:5c:9e:b4:4f:c6:
b0:13:ff:74:42:45:3d:d3:ad:a4:fa:46:de:3f:5a:
93:21:5a:9a:4c:16:92:4d:4d:64:15:a8:71:94:20:
33:03:e9:4f:fb:93:35:d7:48:f3:06:f4:7b:f0:3c:
a0:58:99:d0:74:fe:63:35:89:98:e5:a2:cf:0e:4b:
62:77:1e:b4:c9:cf:d0:24:bf:f5:1e:2e:81:be:95:
58:92:46:74:7e:0a:d9:76:f4:69:d7:8e:3a:27:ba:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.210.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29317
Signature Algorithm: sha256WithRSAEncryption
80:74:4f:7d:a2:cc:90:48:35:f4:45:82:20:78:81:7a:1d:76:
5c:9c:87:b2:90:f8:ea:2b:2b:9f:15:d3:ac:70:0e:ef:56:78:
0c:ae:9f:d6:cd:e4:5c:36:09:de:a1:ea:73:50:d1:5e:19:b4:
aa:4f:fd:e7:7f:69:24:a3:a5:40:4c:e4:f5:95:27:b7:3f:3c:
75:9b:46:9e:e7:a9:b7:79:8b:4d:f7:90:4e:27:42:1a:5d:25:
d2:6b:20:32:95:f0:f8:4c:bb:cb:74:09:9a:e3:ae:4f:9b:70:
11:9c:00:61:8d:6e:88:d0:8d:ca:7b:bf:6a:91:8f:e9:7d:b3:
a1:40:80:e8:91:6f:34:54:e8:91:c3:bf:2f:aa:0f:a0:f0:07:
07:97:79:6e:7f:6a:64:ab:1d:34:36:80:85:c9:16:75:0d:16:
5c:51:fa:1b:fc:3a:8a:a8:f5:37:f2:5a:71:db:05:96:fb:65:
ad:b8:0a:a3:16:01:3a:4e:c5:e8:d4:8f:0c:c3:90:20:82:82:
5c:89:07:66:83:3b:0d:c7:a3:80:dc:1a:e9:80:3a:38:38:6a:
ea:59:31:bc:a3:d3:8d:f3:62:fc:02:8e:82:40:f9:b0:06:66:
41:20:d7:b0:ea:78:c7:05:f9:0a:de:70:f3:cd:ef:b1:68:56:
a4:b5:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:07 2025 by rpki-client