Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer (raw, json)
Hash identifier: R73I5/0LZP5q28hMzORh19qMq/qXuzD3sG4y6udIya0=
Subject key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD4781C1994B4E88695E706AFC6719
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208672
IP: 45.90.136.0/22
IP: 2a0d:4080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:47:81:c1:99:4b:4e:88:69:5e:70:6a:fc:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:48:02:58:ba:bf:74:6b:e6:82:1b:7d:9b:
7b:1f:9d:2a:2d:7b:39:83:6f:2f:18:f4:f8:d2:44:
bb:c0:71:0b:c0:de:95:32:bc:90:5e:84:5a:e5:9c:
8d:b1:65:9e:28:4d:53:8a:e2:42:db:df:47:05:76:
ca:4b:5c:9a:82:ab:98:ea:da:f0:c1:01:d1:46:04:
fa:d2:51:55:83:78:32:d6:02:af:50:52:88:9f:8e:
e1:3b:b1:92:32:34:42:c0:c3:ee:fe:6a:74:0a:ab:
32:47:a5:1d:03:ef:c3:f4:c6:7c:26:87:e9:61:f4:
e4:98:1c:25:04:70:8b:82:0b:28:5c:18:d5:b8:3c:
85:ce:66:cd:1c:0f:10:bc:45:e7:bf:6d:06:ca:a3:
1a:f1:d4:a4:89:1d:b9:7e:d7:12:9e:38:9c:e1:62:
d1:74:92:1f:cc:ba:d4:e4:eb:07:c6:ac:4f:14:b0:
ce:11:f5:ae:c2:f0:1c:b4:85:cd:2a:44:43:8a:fd:
d4:8a:24:8c:cb:6d:93:8d:6e:45:6e:68:1b:64:f1:
91:bd:75:99:61:f7:2e:61:bb:dc:91:0d:4b:c4:11:
8b:df:4e:b5:19:bb:7d:83:88:df:21:f3:3e:d9:21:
d0:d1:9b:63:d3:76:d1:21:32:84:ad:7c:7c:55:41:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.136.0/22
IPv6:
2a0d:4080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208672
Signature Algorithm: sha256WithRSAEncryption
00:f5:b1:b5:b7:52:88:f9:66:b2:a6:8a:56:21:e5:63:a7:f8:
6d:7c:16:50:9b:60:0e:92:7c:04:a9:15:e2:85:8b:7b:bc:4f:
98:74:cd:49:4e:c3:60:83:21:d9:22:dc:ef:f3:5a:7e:cb:52:
31:74:49:bc:62:f1:5f:bf:57:09:3a:64:bb:de:c6:b5:94:45:
5d:df:f4:7f:4b:4a:c0:f7:43:4f:d7:b8:8e:1e:21:ac:de:29:
d1:d6:fc:2c:50:61:8d:88:5c:99:67:8b:70:54:95:cd:f8:95:
4e:d5:0d:99:4f:1b:02:f6:e1:71:9d:43:8c:f4:1e:98:65:d2:
71:9e:a0:e9:9f:bb:97:06:e6:52:40:a9:65:48:c2:0c:26:23:
b9:69:09:73:71:dd:44:a4:df:1c:ad:af:fe:1a:27:57:fa:7d:
ea:ae:63:4a:6a:19:84:85:67:c2:fc:aa:a6:33:7d:3e:64:06:
97:d7:da:e7:ef:df:8a:40:76:d7:82:05:72:87:c3:04:67:68:
db:68:5a:e0:fc:5c:84:e7:8e:3d:bb:f3:da:07:c8:9f:e2:77:
bd:e3:d8:26:44:d1:73:af:58:d9:83:b6:4a:cb:53:3a:0e:19:
2b:f1:cf:9f:0e:c3:dd:68:95:9d:73:b9:6b:7c:69:cd:cf:5c:
fb:09:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:53 2025 by rpki-client