Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer (raw, json)
Hash identifier: yC+YWkVOMvY4xd+G6OojRioIDXiH+urLwxRlT/enkcQ=
Subject key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B557FEF7E99FCC237B933E0DC76BFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25040
IP: 193.201.42.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:57:fe:f7:e9:9f:cc:23:7b:93:3e:0d:c7:6b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726f9448a910d2574157a30403f46c1172aeedb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:bc:91:f8:e2:b4:20:cd:00:64:2a:cf:64:
6d:2d:e6:6f:90:0b:ed:be:50:69:42:63:f6:5a:95:
40:75:d0:76:40:45:95:19:2b:2a:87:55:e5:0e:1a:
25:d4:64:00:c3:0b:6e:66:3e:51:9d:90:be:b8:81:
c5:3f:30:fc:14:dc:b1:55:b9:a3:fa:04:ff:8d:f4:
be:2a:8e:d5:5b:70:d0:a4:bd:a5:bc:48:c8:d3:70:
1c:73:18:76:c0:02:99:89:8f:78:af:e4:78:97:73:
f8:d0:1f:00:7a:85:66:42:0c:2c:3b:1a:3b:32:6f:
fb:59:60:ec:25:26:00:35:3e:64:bb:f3:e2:df:62:
9b:8f:03:cc:8b:e4:87:2f:08:08:cc:85:8b:26:d8:
e2:9e:2d:72:ed:2a:40:70:e3:ec:eb:b5:b2:5d:1d:
f7:c4:83:21:9a:44:97:fa:43:e0:7c:8a:8a:2f:2d:
4b:47:42:10:b8:89:f1:dc:d7:82:1b:30:cd:2c:d1:
0a:3a:af:df:67:51:96:96:88:a6:ce:b3:9d:68:ec:
8b:6a:6a:06:fd:80:a2:2c:e8:4b:cc:0b:da:55:df:
5c:6c:e6:bb:e8:b4:a5:4e:6f:b2:6b:d3:b9:3d:f1:
bb:2d:9c:e7:2c:37:d3:a0:c9:bc:5c:e3:79:b4:c4:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.42.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25040
Signature Algorithm: sha256WithRSAEncryption
43:f2:d7:ae:e9:78:31:5e:50:df:f5:ca:2d:0c:44:f3:c5:c9:
fe:0c:50:bd:f3:8a:49:54:38:a0:04:3d:0e:a2:b5:ac:35:65:
d2:6f:c1:20:8a:9a:95:0c:dc:03:07:61:3a:69:5d:21:aa:01:
a0:5c:56:c3:70:20:f8:34:97:e9:00:0c:21:b2:af:29:76:0e:
39:e6:46:36:54:f2:31:33:4b:f4:22:ea:8f:a1:80:af:8a:fa:
2e:d2:0e:ee:21:75:b8:3c:d3:de:5f:36:75:6f:2a:5a:7e:9d:
79:cd:54:e5:34:96:06:e1:59:08:94:25:2f:0b:78:2a:fa:3e:
ee:24:9b:04:b8:f2:ff:c1:d9:64:f4:d6:bf:f6:64:84:d9:9f:
0d:e2:e1:26:65:1f:2b:b3:c5:96:23:79:b2:bc:d0:a1:32:03:
a3:a7:c4:34:6c:cd:44:59:c1:96:61:0b:22:d4:c3:44:7b:86:
eb:b0:bf:f4:8d:a3:39:fc:3d:9b:cb:82:19:a8:a4:92:13:d0:
a2:41:7f:36:35:9d:9c:17:c4:05:21:18:ff:67:14:c2:48:6c:
e1:3b:36:d7:07:f1:7f:77:54:56:45:16:f6:53:61:3a:d3:b3:
d4:4c:98:8b:e7:3d:6d:ab:2b:2d:68:a9:c7:0c:b2:f8:e9:6b:
7b:2e:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:03 2025 by rpki-client