Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
File: btAxXocokhqZ_GNGtM6PELXbhnw.cer (raw, json)
Hash identifier: RSliFCLsCj1kmpNA6Zihq3PJJC36FA8P5ayJ9Bfvroo=
Subject key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C42611B6A36BBE033CA22609DFC15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200793
IP: 185.235.192.0/22
IP: 2a0d:7300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:61:1b:6a:36:bb:e0:33:ca:22:60:9d:fc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:06:e9:48:bb:b7:dd:70:6b:63:00:0f:d0:
a7:38:0d:30:c5:5a:4d:9b:e9:6f:fb:f5:98:30:02:
9a:c6:bc:7a:83:35:9d:c2:10:b3:be:81:40:10:63:
4f:c5:a2:a7:80:e4:16:ab:3d:4f:6e:29:6b:ad:dd:
77:45:a7:ca:74:d0:d8:fd:2c:c7:10:8f:66:bd:5e:
1e:dc:5f:bc:66:38:0f:00:ed:74:05:01:26:f2:34:
06:44:99:e2:39:af:bf:28:5a:cf:92:9e:f3:01:d7:
09:04:e4:17:2a:1a:02:47:ec:4c:59:fe:86:aa:f2:
2f:e8:dc:b5:c3:08:20:dd:42:98:f2:9a:53:8f:b8:
24:cb:00:85:1c:3c:c9:2e:c6:4c:52:92:14:ec:4a:
2c:22:d0:35:88:56:42:73:9e:36:7a:fd:3b:b3:ad:
d5:73:73:80:ff:1a:5b:27:f4:6a:ed:a6:89:89:e1:
07:2d:ac:0d:e9:9a:85:98:a7:c9:5b:a1:b2:7b:b5:
25:69:d0:03:51:61:be:ca:c7:17:17:d6:9a:83:84:
1d:a4:e3:ff:66:8c:1b:ce:a9:51:41:98:8e:85:1d:
a0:67:61:e0:ef:11:65:cd:72:e7:b6:7c:d9:54:25:
4f:1a:9e:00:b8:95:5f:4d:cb:6b:c8:27:d4:aa:9e:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.192.0/22
IPv6:
2a0d:7300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200793
Signature Algorithm: sha256WithRSAEncryption
97:68:b7:c1:4e:84:ce:1a:65:aa:cd:67:bc:97:63:a9:33:3d:
b2:93:c3:48:23:d7:f2:0f:41:8c:00:c7:ef:ce:64:cb:28:a4:
4e:00:81:ab:8c:a1:30:2f:f5:02:12:a8:aa:85:49:86:a8:ff:
b1:a5:3f:9a:6a:37:a3:88:12:b6:6a:0c:f0:e2:a4:e2:a7:74:
70:11:1c:b5:f4:63:32:a7:2e:16:4b:1e:a9:f1:86:ab:c9:77:
70:ea:5a:fa:03:1d:f8:e8:15:c2:39:5d:04:ed:ae:be:11:46:
41:d2:b1:70:7d:3d:2e:7a:9f:ef:e8:da:f1:a4:8f:1e:e1:7e:
f4:bf:08:28:67:6f:71:f4:e4:38:68:a8:ac:79:bd:62:2f:27:
12:3b:c8:ff:0f:97:13:69:17:34:1e:52:74:13:1c:d9:c3:1d:
89:c8:70:a9:08:4d:ba:5b:36:6f:48:73:fb:e3:06:99:5c:3e:
4c:07:62:30:82:52:d1:e8:c5:44:b7:df:28:3a:55:99:6b:e2:
74:30:b1:36:f5:0b:b7:b6:e4:72:52:3f:d6:29:30:dc:39:77:
2a:e3:ea:6f:0a:02:83:81:00:8b:5e:b4:d4:82:6a:07:fb:9c:
ca:0e:72:72:50:86:77:4e:2b:a2:43:72:05:91:ae:ce:8b:db:
03:6e:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:07 2025 by rpki-client