Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
File: d6W3Uxx6reukfRwv65uee6qxu7c.cer (raw, json)
Hash identifier: djYr7uxcGSnzNZ9wDMwiNFsxDt/wmaRMvWa0eqKhbIw=
Subject key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63EE89DD2DBD19B25C4EF93DFFDA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43304
IP: 185.188.32.0/22
IP: 2a0b:b580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3e:e8:9d:d2:db:d1:9b:25:c4:ef:93:df:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:6c:52:e0:77:2d:ca:36:69:70:0e:2d:60:
db:01:f1:66:72:89:76:31:07:96:f2:8b:4e:fd:7a:
ae:f5:81:7d:d7:2d:ea:8f:10:40:45:ab:59:16:5f:
22:72:9f:26:1c:0a:d0:88:49:49:79:53:fe:3f:42:
e6:82:9a:8a:82:e5:41:b2:bf:2b:c5:3b:55:b6:d8:
62:6b:7e:4b:de:35:b9:08:7f:88:bc:9e:30:41:17:
2e:c5:a0:2c:03:95:8e:8c:26:b2:01:77:a9:22:cc:
ba:7c:51:b6:86:67:ae:41:f8:2f:d6:2d:7d:80:3f:
c8:14:9c:2d:89:10:9f:d0:8a:d2:69:d0:37:c9:e1:
28:aa:51:f3:0c:08:b6:7b:c7:44:f1:72:7d:b5:f3:
a3:d7:8d:65:58:53:6f:58:51:36:aa:d9:52:70:b7:
bb:6a:b4:29:4f:b9:51:8b:a8:f4:60:b5:d3:f7:4f:
bf:86:64:de:a8:9a:62:99:b3:6a:7d:83:fa:fb:aa:
a6:70:77:e7:79:38:50:75:2e:4d:da:db:67:26:ae:
e7:a8:ef:3a:b0:b3:30:b3:5b:b5:64:85:4b:2e:cd:
7d:bc:81:8e:9f:68:ef:ce:35:79:50:64:a4:4e:9f:
60:91:50:df:27:66:b9:2d:93:a4:77:50:07:52:59:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.32.0/22
IPv6:
2a0b:b580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43304
Signature Algorithm: sha256WithRSAEncryption
09:c8:20:dc:ce:65:3a:58:77:8f:0b:63:18:08:ca:77:ac:94:
85:ad:e7:7a:44:9d:f9:04:00:be:13:8b:97:b9:d8:53:d3:9f:
b6:ca:08:19:de:28:0b:fc:75:b3:75:24:f3:31:29:59:3d:fe:
57:7d:4e:18:44:b7:63:75:08:c3:57:01:ba:09:8d:e4:a4:f3:
9d:b0:64:17:23:ae:ef:97:f3:e3:95:17:6c:8d:8f:ff:73:7f:
68:99:78:81:08:b4:2e:be:a3:5f:27:0b:a2:fc:9c:e3:db:95:
a2:81:85:35:fc:f2:2b:51:5d:3a:aa:d2:a5:77:24:d1:85:0c:
72:dc:19:4b:07:c8:bf:37:85:09:01:b4:65:27:7e:23:18:e6:
ed:fd:20:f0:a8:bb:e0:0d:48:a1:33:93:3a:2e:0d:bc:4b:5e:
4e:77:bd:a5:ac:52:16:88:3b:6b:f1:62:e2:a2:ca:d9:3e:ef:
a4:b2:33:93:04:7e:45:21:9e:2a:df:67:54:ae:a9:95:a4:c0:
5f:dc:25:f1:18:9e:a1:75:90:d2:ad:36:65:1e:00:4e:09:30:
c7:4c:38:b7:2c:7a:77:59:e4:5d:b4:a6:25:9c:7b:9c:88:99:
96:d4:7f:ef:75:78:36:18:c8:b3:44:7d:66:1d:ee:06:59:e9:
96:fa:4f:8d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1j7ondLb0ZslxO+T3/2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2E1Yjc1MzFjN2FhZGViYTQ3ZDFjMmZlYjliOWU3YmFhYjFiYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c9sUuB3Lco2aXAOLWDbAfFmcol2
MQeW8otO/Xqu9YF91y3qjxBARatZFl8icp8mHArQiElJeVP+P0LmgpqKguVBsr8r
xTtVtthia35L3jW5CH+IvJ4wQRcuxaAsA5WOjCayAXepIsy6fFG2hmeuQfgv1i19
gD/IFJwtiRCf0IrSadA3yeEoqlHzDAi2e8dE8XJ9tfOj141lWFNvWFE2qtlScLe7
arQpT7lRi6j0YLXT90+/hmTeqJpimbNqfYP6+6qmcHfneThQdS5N2ttnJq7nqO86
sLMws1u1ZIVLLs19vIGOn2jvzjV5UGSkTp9gkVDfJ2a5LZOkd1AHUlkemwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHelt1Mceq3rpH0cL+ubnnuqsbu3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzNkZDM3
ZC02YjBiLTRmMWYtYjBmYi05MzIzOGZjZDE2MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvM2RkMzdk
LTZiMGItNGYxZi1iMGZiLTkzMjM4ZmNkMTYyMi8xL2Q2VzNVeHg2cmV1a2ZSd3Y2
NXVlZTZxeHU3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubwgMA0EAgACMAcDBQMqC7WAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCpKDANBgkqhkiG9w0BAQsFAAOCAQEACcgg3M5lOlh3
jwtjGAjKd6yUha3nekSd+QQAvhOLl7nYU9OftsoIGd4oC/x1s3Uk8zEpWT3+V31O
GES3Y3UIw1cBugmN5KTznbBkFyOu75fz45UXbI2P/3N/aJl4gQi0Lr6jXycLovyc
49uVooGFNfzyK1FdOqrSpXck0YUMctwZSwfIvzeFCQG0ZSd+Ixjm7f0g8Ki74A1I
oTOTOi4NvEteTne9paxSFog7a/Fi4qLK2T7vpLIzkwR+RSGeKt9nVK6plaTAX9wl
8RieoXWQ0q02ZR4ATgkwx0w4tyx6d1nkXbSmJZx7nIiZltR/73V4NhjIs0R9Zh3u
BlnplvpPjQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:50 2025 by rpki-client