Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
File: buKspS4zrI1YnzIhdZLNHmm_cEw.cer (raw, json)
Hash identifier: sQKkBWySU5aMZHxxB3al2vikgSKsbuCe7lq6eZwEDBo=
Subject key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D601A360D9C4BD68B5C7BC683C337F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31590
IP: 77.247.64.0/20
IP: 185.121.60.0/22
IP: 194.150.108.0/22
IP: 194.242.40.0/24
IP: 2a02:4de0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:01:a3:60:d9:c4:bd:68:b5:c7:bc:68:3c:33:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:71:23:09:77:63:ea:bf:bf:14:80:7b:28:90:
9b:9c:a7:2c:14:e9:7b:59:22:c2:e1:9c:ca:44:4c:
6c:b1:45:b8:9b:62:08:b8:8e:b3:4c:97:cd:a3:3a:
09:85:18:0c:62:8b:d0:46:22:37:45:e1:bf:34:81:
54:93:f4:d9:58:8d:41:9d:84:79:b2:be:0d:c5:bc:
e7:18:a8:1a:54:08:be:48:07:be:e7:b7:bc:d6:98:
87:6f:3f:3c:60:d3:2e:42:af:2d:03:11:01:73:48:
07:59:93:71:a2:52:72:6a:3c:93:25:e1:b9:cc:93:
49:d4:db:7f:b6:47:7b:0d:2d:9b:f7:f1:f5:a1:f3:
6a:ca:fe:88:2f:14:3e:06:e5:bb:b1:c5:71:e1:12:
ac:be:81:95:4d:10:98:17:10:49:53:45:a5:db:20:
5a:e9:a9:86:1a:0c:97:d0:4a:5c:79:ba:92:64:8e:
d3:69:e6:b1:1e:f7:ff:fd:91:fc:59:2b:7c:37:e6:
ec:20:6b:72:ca:24:b8:ed:37:8a:78:3a:22:73:cb:
30:ef:1d:61:55:87:f3:92:8e:af:84:c7:e9:83:60:
20:09:49:5f:eb:9f:65:b1:eb:f6:3a:94:57:ec:84:
5f:72:38:a3:ed:70:f6:54:79:dc:32:cb:f0:ab:cd:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.64.0/20
185.121.60.0/22
194.150.108.0/22
194.242.40.0/24
IPv6:
2a02:4de0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31590
Signature Algorithm: sha256WithRSAEncryption
96:56:20:ba:01:9b:48:fe:13:3b:7c:44:41:ab:50:1c:74:fe:
b5:1c:ac:39:6f:9a:e9:69:f7:65:9a:70:21:45:64:ad:10:a8:
b3:20:8c:ea:e4:ab:4f:90:24:2d:d0:56:52:54:c4:cf:63:55:
a9:da:a9:98:80:55:57:e4:b0:fb:46:04:be:75:37:29:ff:90:
28:3d:38:cc:29:ac:46:be:16:ca:71:ed:36:00:8e:8e:bc:c9:
f6:48:c4:e1:76:9c:7c:88:01:8b:c0:bc:2c:8e:96:ea:a8:0f:
30:64:90:8c:8b:b2:f9:33:eb:ed:b6:d9:d1:2b:6e:b4:d9:ec:
46:3b:75:ac:85:61:a5:c9:c6:5b:7f:b0:6f:36:f5:f4:2a:4b:
0e:8f:51:84:1a:75:50:c2:e0:ad:5e:2f:98:ae:82:a6:46:6c:
5f:d7:8d:63:29:53:56:a6:bd:b0:54:f4:b3:d4:dd:47:93:85:
9e:74:5d:b8:8d:24:f9:9a:60:38:4d:64:4b:1a:bb:8b:1b:29:
41:9c:2f:f4:4a:c3:6c:91:8d:da:f4:7a:df:9f:2a:78:24:33:
ff:4a:d1:ca:94:bf:d9:d6:2e:c9:de:e7:6d:7b:9c:09:dc:3f:
7a:00:d6:11:ee:21:71:4c:a9:36:39:b3:71:93:0b:da:9f:63:
de:96:f3:59
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZQg1gGjYNnEvWi1x7xoPDN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWUyYWNhNTJlMzNhYzhkNTg5ZjMyMjE3NTkyY2QxZTY5YmY3MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XEjCXdj6r+/FIB7KJCbnKcsFOl7
WSLC4ZzKRExssUW4m2IIuI6zTJfNozoJhRgMYovQRiI3ReG/NIFUk/TZWI1BnYR5
sr4NxbznGKgaVAi+SAe+57e81piHbz88YNMuQq8tAxEBc0gHWZNxolJyajyTJeG5
zJNJ1Nt/tkd7DS2b9/H1ofNqyv6ILxQ+BuW7scVx4RKsvoGVTRCYFxBJU0Wl2yBa
6amGGgyX0EpcebqSZI7TaeaxHvf//ZH8WSt8N+bsIGtyyiS47TeKeDoic8sw7x1h
VYfzko6vhMfpg2AgCUlf659lsev2OpRX7IRfcjij7XD2VHncMsvwq80dywIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFG7irKUuM6yNWJ8yIXWSzR5pv3BMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2UwMzY4
OC1iOTNkLTRhOWItOThjMS1hYTM5NjQzNzdhMDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZTAzNjg4
LWI5M2QtNGE5Yi05OGMxLWFhMzk2NDM3N2EwMC8xL2J1S3NwUzR6ckkxWW56SWhk
WkxOSG1tX2NFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQETfdAAwQCuXk8AwQCwpZsAwQAwvIoMA0EAgAC
MAcDBQAqAk3gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAntmMA0GCSqGSIb3DQEB
CwUAA4IBAQCWViC6AZtI/hM7fERBq1AcdP61HKw5b5rpafdlmnAhRWStEKizIIzq
5KtPkCQt0FZSVMTPY1Wp2qmYgFVX5LD7RgS+dTcp/5AoPTjMKaxGvhbKce02AI6O
vMn2SMThdpx8iAGLwLwsjpbqqA8wZJCMi7L5M+vtttnRK2602exGO3WshWGlycZb
f7BvNvX0KksOj1GEGnVQwuCtXi+YroKmRmxf141jKVNWpr2wVPSz1N1Hk4WedF24
jST5mmA4TWRLGruLGylBnC/0SsNskY3a9Hrfnyp4JDP/StHKlL/Z1i7J3udte5wJ
3D96ANYR7iFxTKk2ObNxkwvan2PelvNZ
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:38 2025 by rpki-client