Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.cer (raw, json)
Hash identifier: XG6HkVZR2BE/bHu0FpOjjyB3uI4FU+hxeaea+5SNV0Q=
Subject key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9C291289057AA60F0F9A11FB46E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20980
IP: 193.108.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:29:12:89:05:7a:a6:0f:0f:9a:11:fb:46:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753d476db96de1e58623119a70b9d7b00b676da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:38:12:67:1f:48:81:c7:4c:3d:a5:c6:8c:
9a:11:69:32:f3:33:5e:be:e4:f3:f4:c7:ac:2d:1e:
31:92:2a:5c:a4:ad:e6:4e:9c:6a:9d:6d:24:10:02:
db:8e:2d:66:12:39:7a:fd:35:5b:d1:08:82:b3:c4:
f5:33:20:3d:f0:3a:5f:f8:fb:dd:75:22:1f:ee:b2:
e5:bc:78:05:d6:59:2b:2d:0b:69:b8:e6:8e:ca:67:
e4:8d:c4:1f:55:e1:6f:6d:91:32:20:74:89:c9:b7:
a0:cd:06:fa:77:ad:21:6c:cc:af:3c:26:50:26:d9:
a4:23:3b:97:72:ba:e2:03:94:3f:e4:0b:df:e9:07:
f9:3a:87:12:47:bc:0f:48:b3:22:fc:1b:a7:37:20:
94:0b:e4:7e:a2:55:56:22:56:0f:8f:7b:0b:13:95:
10:77:f9:3a:dd:dd:bc:ce:d3:7a:83:db:d1:82:db:
2a:81:3a:8b:6d:55:e8:8a:f9:2d:4b:2f:12:23:69:
1f:8d:b5:5f:7f:f6:01:dd:e6:61:94:04:72:7c:ae:
10:49:82:de:1c:d9:70:26:ae:4a:02:57:56:4f:fc:
af:71:4d:70:45:9d:6c:40:76:b3:98:63:6a:41:94:
f7:89:ba:4a:f2:07:f5:f6:15:d7:f0:80:d1:af:a6:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.8.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20980
Signature Algorithm: sha256WithRSAEncryption
2c:0e:db:24:70:18:9d:c5:4e:b3:62:b1:2f:12:cc:5d:6f:09:
63:3d:74:ca:69:d8:d7:9a:9d:f5:d2:db:44:3c:20:57:d5:fd:
16:bb:be:f7:50:71:d1:a2:18:46:42:8e:6f:d9:43:fd:3f:6b:
68:fd:e5:03:ef:a0:74:03:77:98:2f:e0:99:3e:2a:61:6d:01:
20:65:24:ac:c7:2f:95:28:cf:c5:ea:49:eb:10:b5:b1:07:c4:
35:07:53:7e:78:eb:4e:8d:af:b9:b0:c8:27:55:66:61:a4:94:
45:d3:9b:da:f3:7f:85:a6:41:c6:11:3c:fb:b7:84:4f:c7:e1:
6f:3b:92:82:b6:8f:08:66:5b:0d:d3:de:0f:09:91:22:00:f1:
62:00:f2:2e:93:fc:5d:a0:88:31:c1:b7:31:5a:fd:e7:ad:d7:
0e:9a:d6:cb:38:a5:45:b7:4e:cb:6c:a1:dc:65:78:82:6b:fd:
a9:41:a2:34:7b:35:5e:5b:b5:a5:83:1d:c9:71:34:6f:32:2f:
d4:2c:22:84:1e:a0:e7:ff:75:5f:41:07:2c:e5:f3:a0:d2:2a:
9a:e5:e9:aa:6e:89:d7:9e:e5:4e:15:e0:8a:ec:7c:03:d5:13:
ca:a8:09:1a:d1:2b:0c:c6:c1:2d:cd:f1:e7:c0:54:ed:11:a5:
a9:1c:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:17:51 2025 by rpki-client