Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
File: cBxcPyilwHENvkgp0hbInpQu8Os.cer (raw, json)
Hash identifier: 5ud1h2eOLrY6kJmkqp8y/PbGIN4tAaMvsm2/W7a8I7w=
Subject key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E7677AABC51CF99E07358A5B26F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203838
IP: 2001:67c:2ecc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e7:67:7a:ab:c5:1c:f9:9e:07:35:8a:5b:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:ea:83:59:eb:d5:88:f8:49:24:35:60:bb:
3f:e8:68:9d:b4:19:6f:9e:65:9d:d3:42:48:61:69:
41:50:b8:cf:bc:18:b3:a1:21:bf:dc:b5:85:6e:eb:
a6:22:ae:4a:1f:fb:5b:08:ef:75:1d:42:38:db:a1:
da:82:45:64:26:6c:6d:1f:9b:96:26:3a:b6:99:64:
13:8d:12:b4:8d:51:7a:34:02:46:29:0a:56:28:73:
41:b3:04:a1:b1:04:c7:cc:70:f6:c5:73:96:c9:fa:
0d:ed:f7:cf:12:54:55:0b:47:3e:e9:13:27:6b:15:
10:ae:32:82:6c:62:9d:aa:a2:0a:d1:e1:e6:49:6c:
69:7b:38:4b:cd:5b:49:49:bb:e1:db:54:f4:8f:b8:
86:67:5c:e9:31:0a:25:96:18:b2:dd:71:8b:e5:b3:
8a:90:07:97:bf:1f:f0:ad:8b:37:9d:13:2f:4a:a0:
ca:fc:e7:5c:2f:1c:58:b1:6f:cc:8c:5a:60:52:ce:
00:a1:bc:2c:8b:24:e0:b8:bf:ae:8f:48:0c:f8:25:
4f:0f:bd:b2:f9:ec:83:15:2d:aa:b5:43:39:55:14:
57:e5:57:4b:61:5c:2c:4f:52:e7:a5:57:df:e4:8a:
13:ca:e2:81:e2:e5:41:2c:b6:34:ae:86:4d:77:86:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ecc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203838
Signature Algorithm: sha256WithRSAEncryption
70:32:de:18:23:83:2f:f7:bf:2e:6b:22:00:db:5d:a3:8c:96:
2b:4b:63:9f:a5:8c:75:36:ff:20:44:f1:8e:7c:a9:0a:9f:5b:
72:64:54:1b:98:04:27:9d:36:bf:13:91:d5:09:12:64:ac:d7:
e9:d3:51:f9:dd:c3:46:53:73:c0:0a:53:0a:45:df:14:70:7b:
b6:88:1e:7e:d5:5d:7c:1c:23:77:9e:93:48:78:07:9e:68:ef:
8e:cc:40:f3:5a:2e:c0:5c:db:5d:42:b2:9e:97:a2:36:78:90:
ad:bb:0b:40:0e:ed:1c:f6:0a:dd:b0:4e:66:aa:6f:a4:9b:07:
55:cc:21:6f:e7:51:06:10:0e:b6:e6:5f:9d:fa:35:e6:87:f9:
70:66:45:18:67:ba:c1:22:f9:ce:4c:6b:46:6a:0d:75:3c:7a:
f5:ee:18:bc:8c:63:a8:64:c4:ac:e2:d0:78:13:93:2f:ba:a3:
c5:c5:da:7c:b1:a5:76:ff:4e:a8:8d:33:86:b7:4c:47:8c:2d:
36:9f:c3:ab:26:35:54:3f:fe:f2:ee:5f:c6:88:64:77:bc:61:
59:c4:cf:26:21:e3:bb:7c:1a:be:8b:dd:c3:83:2d:7a:c8:bb:
b1:09:81:ea:9d:71:c1:49:a0:41:be:cc:a0:b8:84:7b:fe:fc:
ae:39:13:bf
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQhQ+dneqvFHPmeBzWKWybzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDFjNWMzZjI4YTVjMDcxMGRiZTQ4MjlkMjE2Yzg5ZTk0MmVmMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xjqg1nr1Yj4SSQ1YLs/6GidtBlv
nmWd00JIYWlBULjPvBizoSG/3LWFbuumIq5KH/tbCO91HUI426HagkVkJmxtH5uW
Jjq2mWQTjRK0jVF6NAJGKQpWKHNBswShsQTHzHD2xXOWyfoN7ffPElRVC0c+6RMn
axUQrjKCbGKdqqIK0eHmSWxpezhLzVtJSbvh21T0j7iGZ1zpMQollhiy3XGL5bOK
kAeXvx/wrYs3nRMvSqDK/OdcLxxYsW/MjFpgUs4AobwsiyTguL+uj0gM+CVPD72y
+eyDFS2qtUM5VRRX5VdLYVwsT1LnpVff5IoTyuKB4uVBLLY0roZNd4bBuwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFHAcXD8opcBxDb5IKdIWyJ6ULvDrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2ZhYzky
MS1mNTUyLTRhOGEtOGI0OS00ZmE5ODYwMWFlOGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvZmFjOTIx
LWY1NTItNGE4YS04YjQ5LTRmYTk4NjAxYWU4Yy8xL2NCeGNQeWlsd0hFTnZrZ3Aw
aGJJbnBRdThPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7MMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMcPjANBgkqhkiG9w0BAQsFAAOCAQEAcDLeGCODL/e/LmsiANtdo4yWK0tj
n6WMdTb/IETxjnypCp9bcmRUG5gEJ502vxOR1QkSZKzX6dNR+d3DRlNzwApTCkXf
FHB7togeftVdfBwjd56TSHgHnmjvjsxA81ouwFzbXUKynpeiNniQrbsLQA7tHPYK
3bBOZqpvpJsHVcwhb+dRBhAOtuZfnfo15of5cGZFGGe6wSL5zkxrRmoNdTx69e4Y
vIxjqGTErOLQeBOTL7qjxcXafLGldv9OqI0zhrdMR4wtNp/DqyY1VD/+8u5fxohk
d7xhWcTPJiHju3wavovdw4Mtesi7sQmB6p1xwUmgQb7MoLiEe/78rjkTvw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:22 2025 by rpki-client