Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer (raw, json)
Hash identifier: RA3hsuE7FPB8JvfAhZtdri6HyQdQdcEkq4E0l+4TCwk=
Subject key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F79E752D7538AAFB27CF9953DCC4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35070
AS: 198322
IP: 91.212.127.0/24
IP: 91.238.107.0/24
IP: 185.223.228.0/22
IP: 193.110.146.0/24
IP: 193.138.90.0/24
IP: 194.165.43.0/24
IP: 2001:67c:12fc::/48
IP: 2a0d:4040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:79:e7:52:d7:53:8a:af:b2:7c:f9:95:3d:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:a6:c3:12:14:1f:df:bc:c4:fd:f0:6d:27:
50:40:ab:bf:99:40:ae:93:37:0c:b6:33:61:89:ef:
89:80:30:2b:fb:7c:64:a2:7c:db:bd:92:c7:40:26:
dd:e4:0c:ed:1a:c8:36:93:2f:df:29:cb:88:bb:83:
f3:01:f5:59:c8:42:d1:d9:85:75:35:cb:2c:f6:de:
d3:a8:ba:be:97:4e:43:a1:59:cb:7f:c1:c0:ea:b1:
e0:22:cd:d2:d5:d6:78:da:da:d5:36:3d:19:a7:ca:
a2:a6:b9:e6:5a:41:02:c5:ab:c2:50:ca:ce:9b:68:
8d:83:06:56:0b:c0:9a:b0:6e:c3:0c:9e:85:08:57:
a4:a0:ac:91:06:f0:8a:46:5a:c8:5c:7d:3d:16:1e:
5c:23:97:4d:04:4b:fe:bd:e0:bf:3f:c0:c1:3f:18:
65:9c:fe:8e:71:ec:c8:e7:c1:cf:37:28:1e:5e:54:
7c:3e:20:9b:86:1b:ee:15:5c:a3:72:83:e2:54:af:
75:36:02:08:1f:6c:2c:8e:d9:c3:bc:8d:e3:80:ba:
89:c4:3f:5e:99:d4:a4:94:e2:6e:a3:cb:5b:4f:9b:
4c:a9:ec:aa:bd:eb:be:18:f7:ba:60:4b:33:3b:a9:
4e:1a:d4:a2:89:c5:3d:e1:90:da:0f:bd:2e:40:27:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.127.0/24
91.238.107.0/24
185.223.228.0/22
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
IPv6:
2001:67c:12fc::/48
2a0d:4040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35070
198322
Signature Algorithm: sha256WithRSAEncryption
41:d9:5f:2a:db:00:2b:ad:b0:78:1a:87:c6:8f:72:14:c8:a8:
7d:1d:08:2f:70:c3:3c:72:78:93:61:4d:5f:12:d9:ba:0b:7d:
67:5c:c6:e1:51:ab:0c:8a:13:e9:6e:de:df:00:5d:58:7f:87:
a4:08:e4:af:61:8b:e5:91:4e:04:11:34:bc:77:16:85:12:a8:
f3:c9:0b:0b:27:1d:40:f6:01:a2:85:d6:71:19:b4:7c:91:34:
24:02:a1:e4:29:c3:5c:8c:77:d0:bc:86:1f:0b:5c:b0:b3:5d:
f4:7a:11:57:57:bd:87:d2:c4:e1:61:1d:23:ce:73:23:69:3f:
cb:33:06:bf:ee:50:00:13:cd:19:ee:6f:3b:07:c5:34:33:5e:
9d:80:4e:46:90:d9:90:03:58:2e:b0:3c:f5:e8:86:25:e2:e2:
a0:c9:4f:25:e9:62:96:ad:d0:37:2c:55:16:25:45:09:96:ce:
c9:34:d0:85:e5:fe:fb:41:6c:7e:3b:39:b0:71:f5:24:b7:9b:
91:9c:ba:28:99:9b:4b:76:f0:8a:79:e7:0d:a0:de:d9:f6:3d:
5f:c8:c5:bc:a0:1c:2b:a1:a6:87:9d:61:83:0f:fa:c1:56:31:
e7:2e:d7:c3:cb:b2:6d:75:d8:c9:00:18:31:1c:83:1e:ba:eb:
29:5d:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:08:27 2025 by rpki-client