Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
File: daWp6O8n4wJyk--E-4-NMPq25tY.cer (raw, json)
Hash identifier: 2Gwh2IN/EMsG60jeAtjEaRpOrJzXcf5r0idGlJJVesQ=
Subject key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B35FB47F626AD2ECD667867F0B94B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 64426
IP: 109.206.232.0/22
IP: 2a0d:c4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:5f:b4:7f:62:6a:d2:ec:d6:67:86:7f:0b:94:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:41:8d:17:ea:e0:83:31:0a:4b:07:9c:81:
44:59:d2:3b:59:31:32:e9:11:e1:f3:4c:48:d3:63:
8e:cc:f9:6f:ec:d3:cd:d3:77:28:f3:53:c3:2a:30:
ae:f2:12:13:2e:1f:ae:e3:ed:25:53:34:1f:29:92:
0f:09:c8:83:92:3a:2d:ca:55:cb:ac:b8:52:d4:ce:
63:5c:cb:ec:1f:c0:b0:eb:b9:50:c0:d3:fe:0e:85:
15:d2:64:c4:27:52:d2:58:a5:7c:59:62:ef:44:7f:
5d:44:c9:e8:01:99:07:80:f7:a4:2f:14:fc:b8:0b:
9b:a5:3b:c1:70:1a:5c:8d:40:cd:ee:2a:14:f0:92:
cd:1b:a1:e9:73:22:64:b9:61:ac:f1:d6:0e:b9:76:
39:73:ec:e1:a0:4c:44:50:d4:ff:3c:c5:0a:a9:dc:
f3:c3:fc:54:97:34:b6:14:c8:be:77:e5:15:6e:88:
ec:8d:77:56:5b:68:27:20:b3:9d:bb:32:12:dd:d5:
04:19:82:97:79:0f:93:a7:e4:1b:23:14:ad:5e:17:
b5:cf:e2:ad:62:f0:8e:61:be:8e:c6:37:e2:36:0a:
c4:37:f8:4f:30:80:df:ad:40:f3:9b:68:a2:39:08:
d9:b4:ef:01:8f:15:e1:1a:a9:39:7a:88:65:1b:a7:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.232.0/22
IPv6:
2a0d:c4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64426
Signature Algorithm: sha256WithRSAEncryption
66:62:a1:7a:fd:58:dd:50:a1:01:47:d6:cf:0f:9b:d7:95:1f:
4f:b6:e0:c2:df:2b:02:df:8a:c3:d9:72:0b:df:17:d9:09:43:
78:46:53:29:4b:25:76:e6:8a:04:01:7d:38:cc:79:34:6f:2e:
51:27:ca:a3:d0:e4:e9:fe:ea:e1:ca:3a:fe:e6:6e:e0:8c:62:
c6:0c:f9:a4:89:e0:39:8b:6d:06:a4:ab:96:8f:c6:61:61:ba:
12:dc:de:33:d5:cd:8e:47:e4:20:83:30:6b:48:20:f9:28:e1:
2a:13:b8:01:6b:73:be:60:d0:dc:b5:ea:89:d7:19:44:9c:5d:
a2:e8:d3:0f:a6:e2:5a:0c:f1:b0:70:40:d3:d9:c5:9c:3c:c0:
f2:1d:74:b2:26:7f:73:10:d0:d3:f5:74:de:82:fb:03:92:ca:
11:ba:8a:4c:3c:a8:8e:94:a0:3f:5e:21:bb:04:d5:a4:67:8b:
14:b3:d7:78:29:bc:d4:24:bd:eb:cc:d2:a2:f0:83:64:f6:4b:
4a:f6:aa:47:15:b2:81:ed:6a:fa:bd:14:c5:8b:03:65:35:52:
5e:a1:ea:48:bc:10:62:82:53:b5:dd:43:9f:6b:49:fe:01:88:
de:4e:bd:d8:98:d2:76:af:15:32:96:d6:a8:d7:7f:e8:89:8e:
65:64:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:27 2025 by rpki-client