Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.cer (raw, json)
Hash identifier: bIatnb4MWGWengM4bL+PqG7z+u9lZzq0RkC1LeUpjc0=
Subject key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC17C3A446F90339008B3F22A2001
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49895
AS: 60276
IP: 46.254.76.0/24
IP: 46.254.78.0/23
IP: 185.1.17.0/24
IP: 2001:7f8:7c::/48
IP: 2a00:e800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c1:7c:3a:44:6f:90:33:90:08:b3:f2:2a:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0e:93:1e:de:1f:22:c1:30:a5:be:99:bb:8a:
72:48:05:05:f6:d2:85:07:fa:16:36:9d:f6:dd:cf:
9d:dc:3a:ad:fb:2f:1a:c0:1f:22:4a:2c:33:c8:ed:
9a:67:32:7c:b7:43:f9:b2:37:60:48:01:d8:1d:79:
ae:9b:ab:35:c8:20:9c:e4:e2:eb:be:74:6c:bf:e0:
4d:93:61:95:f8:6a:b4:d6:ee:79:7a:c8:82:38:ad:
32:d3:e8:84:3b:b5:de:81:05:0d:e3:89:93:11:1f:
26:e4:49:5d:cd:d5:d8:24:7d:dd:6d:f0:9b:b4:de:
bf:fa:1a:9a:b7:b5:59:71:3c:60:7e:10:c9:ef:a8:
fa:66:0d:c1:d5:47:cd:3a:c0:3d:d5:33:ea:1f:40:
b3:9e:ea:40:c5:22:78:85:ea:20:ae:3b:01:b9:01:
93:72:49:46:e5:80:fb:87:97:98:7f:3e:29:69:56:
d6:36:cb:7f:34:10:ce:23:73:0b:4b:f1:25:d3:c9:
37:e6:b8:04:4b:dd:1a:20:fe:af:eb:d8:9c:74:cb:
2f:ab:76:3a:b1:32:e2:f3:28:c3:a9:71:af:6b:88:
5c:c3:d5:64:b6:3a:cc:89:b1:cb:0e:54:43:03:ec:
8f:7f:00:da:c2:2d:60:ec:71:b5:08:bc:ca:ba:30:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.76.0/24
46.254.78.0/23
185.1.17.0/24
IPv6:
2001:7f8:7c::/48
2a00:e800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49895
60276
Signature Algorithm: sha256WithRSAEncryption
0d:29:33:c7:d5:45:62:5d:41:97:f2:14:06:c4:2c:9f:26:c1:
23:cc:9d:1c:92:bc:5f:40:f1:0c:64:5f:a8:92:bb:8c:64:4f:
45:83:bd:d7:2f:56:d5:bf:6f:f7:65:a6:45:db:e0:4a:6e:27:
e4:cc:fd:45:f4:43:e7:b6:71:22:bc:32:82:90:9c:f3:22:cf:
b4:46:8f:e9:38:0e:1c:40:cd:21:f0:f6:35:2f:27:34:eb:57:
0e:94:1f:58:ae:71:ce:10:2a:1e:cc:7b:30:7b:ad:b7:97:92:
dc:26:ae:c0:7f:77:6d:76:5c:9d:c1:4b:bc:60:99:e1:39:96:
07:69:e6:47:5c:e9:87:21:e4:6d:07:53:38:fa:8b:f7:c5:31:
12:9e:c8:c1:a0:91:02:4e:81:36:6b:e0:83:f1:e7:9b:c0:ea:
5f:a5:5f:e9:ab:df:73:25:de:79:fc:86:1f:68:c3:69:05:0d:
60:48:45:66:02:8d:35:cf:86:2d:4c:8f:e1:91:58:a6:13:3c:
e7:73:a9:19:39:fd:82:8d:be:10:0a:f4:71:c4:a2:6e:e2:90:
db:3f:9c:ed:0a:30:ff:33:a6:22:47:95:65:ba:3d:62:e9:b7:
de:9d:d0:22:f4:4f:a4:1c:42:66:f4:f0:c6:c8:ab:8f:49:c5:
6b:d9:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:36 2025 by rpki-client