Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.cer (raw, json)
Hash identifier: d/r+4FMunCgJKTqsL3JqPw7bFcLwTD7kXzJrSzFbu1s=
Subject key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD8447241FB0AB522091E3A93F4C65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204342
IP: 185.251.164.0/22
IP: 185.251.184.0/22
IP: 188.240.40.0/23
IP: 2a0c:2e40::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:84:47:24:1f:b0:ab:52:20:91:e3:a9:3f:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:8d:77:51:e3:f8:ea:84:27:48:b8:1e:cb:
36:b8:c0:c6:da:7e:37:d3:07:3a:e5:e5:22:ab:11:
cd:4e:cf:4f:79:57:1e:13:a7:07:7b:4d:a9:d0:e1:
f5:1b:3a:96:c4:75:2f:43:ee:04:89:31:cf:e3:0d:
0f:68:f7:32:16:5d:ce:1c:44:b1:24:f1:aa:4a:ff:
5b:11:82:2a:f1:c3:f4:d7:44:ac:e9:5b:b8:9e:5e:
82:2b:78:e7:dd:32:20:1d:f5:1e:cc:ff:bd:e1:cc:
fc:27:f6:8b:06:de:0e:82:07:30:d9:80:20:64:85:
5d:47:0e:18:d6:4a:20:5e:09:d2:64:44:7e:a0:7b:
b3:bb:db:cf:7f:c4:ab:0d:29:16:da:45:63:d4:3c:
9f:66:83:2c:54:bc:c0:ce:94:26:29:b9:ef:49:d9:
09:08:d9:e2:92:95:06:ef:d5:11:33:f8:de:5d:86:
ce:43:4f:21:21:cd:ce:d8:3f:df:42:08:e2:e0:5e:
5f:d8:bd:7e:7e:87:e0:15:16:c3:f6:da:87:4f:52:
ad:f2:7c:ab:b7:ec:ef:ea:5c:b4:23:1c:43:48:24:
aa:db:80:c9:2e:42:79:aa:0f:cf:e1:fc:de:61:06:
9e:b3:33:92:7b:6d:cf:08:63:8a:3d:48:70:6d:2c:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.164.0/22
185.251.184.0/22
188.240.40.0/23
IPv6:
2a0c:2e40::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204342
Signature Algorithm: sha256WithRSAEncryption
78:2a:a2:03:ea:03:19:a2:f1:e8:4f:9e:e7:98:c8:f4:4f:3b:
cd:55:ba:b2:e5:27:40:51:da:90:38:8e:04:94:5f:a3:c4:ec:
ca:66:19:4c:7b:be:8c:ff:84:a7:6e:64:2d:b7:d1:ad:c9:4d:
42:11:03:c4:76:a5:a5:a8:01:b7:cc:0e:5e:8f:b7:35:c7:9b:
fd:a6:b5:a7:b6:4a:aa:62:78:c9:f0:1e:4d:de:2d:36:f0:2f:
e7:0b:b1:22:c9:a9:45:0d:1c:af:34:c3:38:71:f4:76:0b:8b:
c0:d7:69:90:1d:eb:e8:f6:26:66:8d:0b:d0:54:b1:92:6c:47:
4d:a6:b7:f7:fc:78:4c:10:7e:60:5e:53:20:eb:03:af:a0:b1:
23:a7:a9:0d:27:97:c9:06:8d:cd:3e:62:d1:84:f3:61:33:7b:
83:5d:cd:0d:8d:59:42:0a:96:1f:b1:59:66:6c:bc:b3:41:90:
c5:dd:52:bb:b4:b8:25:a8:48:0a:c5:7c:fb:35:a5:be:b2:13:
db:6f:52:26:19:80:7d:b0:88:8a:ef:71:74:8d:d0:72:89:de:
77:c7:9e:e7:7e:67:d7:78:7f:4e:a6:f4:7a:0c:ed:6c:07:ac:
d4:7b:f8:9b:36:69:ba:00:6f:a5:59:3c:79:62:b8:2f:6f:76:
4b:c0:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:53 2025 by rpki-client