Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
File: eNDmeWDvds5jPJ_md02H22m4m3U.cer (raw, json)
Hash identifier: 4aPIZw2LN1wVUSIeNlKT1YsXY9FPTzeobA/8HE/TFDY=
Subject key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB70F8A8FDDE4F03DB1114382A02D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204714
IP: 185.242.208.0/22
IP: 2a0c:e580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:70:f8:a8:fd:de:4f:03:db:11:14:38:2a:02:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:ac:da:92:71:cd:2b:11:7f:63:98:6d:45:
11:33:46:ab:ea:80:50:cc:50:ad:f6:54:4f:b8:ae:
2e:8c:b9:26:12:63:bf:6e:05:e5:89:54:c3:78:a5:
e4:4d:ca:e6:2f:81:0a:80:80:e4:a2:71:fe:df:50:
c0:02:e8:3f:fb:49:19:d8:c9:af:da:36:c8:60:75:
d9:35:36:cc:bd:d4:62:24:4f:30:d3:4b:2b:00:fe:
a9:c6:9a:ee:ca:68:44:4f:fe:8e:6b:fd:2b:78:1a:
8b:7d:20:2b:da:68:b7:8e:ed:fc:03:52:40:a4:34:
f0:1f:28:53:45:1b:7f:ef:04:e6:69:21:6d:2f:70:
85:e2:72:49:19:71:b5:0b:2d:be:a2:0a:da:27:1f:
19:88:ea:8a:6c:69:fa:f5:47:eb:e8:db:79:a8:d6:
13:d3:33:18:12:c4:85:16:b3:12:77:5c:e2:d7:b7:
64:da:97:3b:9b:e4:8e:d0:dc:10:a8:ef:91:12:b4:
e8:0d:2c:96:ea:43:45:79:e4:a3:88:f2:e5:2b:d4:
22:bb:35:7e:c3:59:20:93:5f:5e:31:89:34:00:62:
10:e0:d0:16:b7:3a:1d:69:54:7c:e6:be:52:ad:c2:
15:56:60:ab:f0:e5:d7:1f:af:ba:c9:5e:71:cc:24:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.208.0/22
IPv6:
2a0c:e580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204714
Signature Algorithm: sha256WithRSAEncryption
4b:48:48:bc:a8:04:43:42:14:07:7b:bf:67:cc:3c:26:39:69:
9c:de:bc:7c:86:fb:b6:01:98:ff:83:bc:fe:28:f9:d5:c5:dc:
e0:91:ba:5e:5d:8c:cf:b1:a4:9d:cb:9a:a4:2e:14:13:c0:8b:
17:37:bc:4b:4f:29:a4:cb:5f:7d:aa:a6:71:50:9a:03:49:1f:
4c:f5:12:2b:f0:33:31:ef:e2:e8:2a:99:2c:9e:df:47:28:ba:
8a:7a:3a:15:43:e0:75:cc:1b:fc:ce:d0:89:6c:7c:5c:9a:41:
4b:58:2f:9c:77:2d:1c:cf:19:de:d4:dd:a4:f1:e5:31:69:15:
9a:50:08:db:90:a5:20:14:b6:0b:62:7a:16:25:99:cf:49:62:
83:ea:3c:ac:78:40:15:d9:db:c8:6a:1d:88:4b:b3:68:66:8a:
dc:fb:1f:26:98:d4:f4:b9:fe:9a:06:19:96:c7:d1:4f:bc:bb:
1e:f0:cb:40:3a:f4:38:0f:d5:0f:a3:04:95:a8:bc:79:62:a2:
4d:8d:f0:1c:30:97:92:9d:88:ca:fe:01:2a:ba:e9:14:26:f2:
ee:36:ed:6c:1b:09:21:66:41:1c:d2:1e:ba:f8:3f:96:d6:0d:
85:8a:02:3c:8c:81:6a:3b:50:e6:bb:12:2b:27:25:4c:f4:9c:
0f:89:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:00 2025 by rpki-client