Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
File: dNYxjajSNXnE9zi26OVcxf8n5bE.cer (raw, json)
Hash identifier: kbjFp+hj1TCCY+4Yejrk6HYd2NDEwi2Pcp24j3+rXfc=
Subject key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA63518C9588701F678AB1F40EEE86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50119
IP: 176.126.124.0/24
IP: 2a12:380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:51:8c:95:88:70:1f:67:8a:b1:f4:0e:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:8c:56:06:a0:0d:1f:b1:2d:73:32:2f:4c:
7b:46:39:86:11:dc:a9:86:cc:13:c7:7b:4e:b0:54:
76:a9:c6:47:18:a3:29:1c:05:3b:40:0c:f1:0b:d9:
46:e1:5d:e4:46:b9:c0:75:33:d7:ef:62:fe:d8:c4:
2b:2d:9c:59:0c:03:4d:3c:5c:b9:8f:f6:42:65:9b:
27:2b:e8:33:b0:8b:3e:b2:19:3e:9c:66:82:c3:2c:
b6:43:af:9d:80:37:fc:9c:2a:c5:06:ed:7f:0d:a3:
69:60:39:29:49:b1:f1:17:95:ac:be:56:f1:45:99:
3b:67:70:4d:ca:ae:e8:4d:40:ab:bc:6d:e1:42:5c:
18:34:96:61:ec:ac:00:bf:d2:1b:69:83:e2:70:5f:
2b:6a:ce:e7:a0:41:5a:99:f1:7e:f8:df:e1:4f:32:
7f:82:c5:3c:33:20:1c:7b:a8:7a:66:cd:96:fa:56:
7f:1b:7e:20:72:03:cf:48:d0:08:fd:00:0e:20:94:
8b:f4:96:44:a1:8d:a7:79:26:0f:63:4f:3a:5e:19:
e4:fc:47:65:7f:94:1d:4c:73:19:87:0f:b2:69:6d:
1f:29:33:45:75:8b:f1:ce:8f:2a:62:d3:d5:91:83:
6f:41:fb:2d:23:1d:30:57:d9:d6:d6:47:f8:99:59:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.124.0/24
IPv6:
2a12:380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50119
Signature Algorithm: sha256WithRSAEncryption
90:4b:07:1a:b5:a9:09:0d:bb:d7:18:94:a5:ba:db:6d:d7:8b:
36:71:e3:c8:f3:b0:1b:2d:63:f0:66:8b:7d:d8:6f:16:a2:18:
59:d6:01:97:8a:57:4c:ac:c6:0d:25:e9:f7:18:21:2f:c6:69:
69:49:9d:5a:5a:7a:a3:89:0e:11:57:09:ac:6d:39:a9:1f:5c:
87:c2:05:81:2f:30:30:a8:6f:dc:bf:0f:65:85:5c:74:17:16:
a6:f8:08:0d:b1:83:80:22:6e:22:c2:37:1e:b4:d7:4f:2e:c4:
59:3c:56:2e:90:f1:11:19:a5:82:6a:5c:45:2c:28:ce:94:bd:
7c:a3:2a:95:72:ed:70:69:11:31:51:c7:83:ba:56:64:87:33:
86:0e:b2:cf:f2:ec:7d:2d:1f:a2:eb:8c:11:b1:e5:4c:bd:b2:
a6:80:48:54:ec:40:36:dc:4e:f7:bb:ad:db:ef:3b:6a:50:16:
d0:41:f9:b8:91:6d:45:a3:89:a0:c9:51:1b:b6:59:b3:c6:69:
94:da:a5:b7:9d:95:8a:da:d6:c7:13:aa:6f:8b:69:a4:e1:07:
e6:24:13:79:e0:d9:b7:ac:78:b8:4a:c9:6b:07:9a:f1:91:47:
6e:41:2f:ff:69:2a:b9:48:f9:d8:07:b9:b1:59:dd:28:a5:27:
b0:4e:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:52 2025 by rpki-client