Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.cer (raw, json)
Hash identifier: fXQO4rVLLaDiq0rS5y0/HXAhCVh5BPJw+8LG0At3uoc=
Subject key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDB988C14A78A361AD25417BC1B03C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59701
AS: 200997
IP: 79.171.144.0/21
IP: 185.147.72.0/22
IP: 195.5.160.0/24
IP: 2a06:d480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b9:88:c1:4a:78:a3:61:ad:25:41:7b:c1:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:e4:1b:12:7c:da:d8:74:e1:30:9c:f6:28:
25:82:c0:11:99:3b:63:87:86:3b:22:be:0b:c7:8c:
db:87:15:8d:ed:8c:6b:82:44:7c:37:d2:88:7b:76:
3b:0f:10:94:31:cc:2f:c0:e7:c4:47:7b:2f:92:ec:
70:e0:2c:2f:6c:64:ec:55:d6:24:ea:a0:3e:a9:01:
bc:e2:55:5c:7e:d8:b5:bb:1e:a3:83:b0:b6:08:10:
6f:3b:30:ad:51:4f:c4:15:e3:5d:0d:31:43:07:24:
7c:95:c5:b7:91:84:16:36:a0:b9:59:0a:27:19:5f:
fc:d8:57:cf:95:de:a6:5c:d8:f5:28:52:6d:dd:cf:
fe:df:2e:92:bc:48:d8:4c:83:d9:76:e9:da:de:c4:
8f:bf:0c:c3:a7:4a:b6:9b:b2:8b:b1:80:6e:62:00:
a5:f3:08:2b:04:83:d3:58:0c:50:93:58:44:df:db:
04:b3:1d:33:c4:6a:d5:0f:99:1d:eb:da:18:04:67:
66:ac:dc:c8:07:2a:32:e4:81:71:6d:7d:68:29:46:
a6:5b:74:77:23:14:3f:aa:04:aa:ff:57:25:09:ef:
fc:e4:5e:e7:6a:66:49:56:51:00:f6:7a:61:c3:c8:
83:14:4f:1a:45:bd:1b:44:2a:34:4c:4f:66:85:48:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.144.0/21
185.147.72.0/22
195.5.160.0/24
IPv6:
2a06:d480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59701
200997
Signature Algorithm: sha256WithRSAEncryption
42:d9:fb:f2:b0:da:a9:f7:f3:c9:3c:04:f3:36:d0:6f:2d:8b:
a1:3b:69:5d:ba:30:aa:71:05:d1:33:96:52:31:7b:0d:0a:3a:
f7:ab:3a:3b:94:e1:25:38:7e:52:d6:3b:44:bf:b3:41:e4:60:
f0:ae:36:22:04:ea:91:45:fc:53:eb:c6:e2:3d:02:cc:94:fe:
09:64:3e:e2:21:61:04:a5:c8:33:f3:9a:a4:02:4c:d5:27:b2:
cd:32:0f:33:26:50:29:26:74:54:54:bd:fc:e7:e7:1d:0c:33:
28:9d:ed:2c:be:9c:73:ce:41:00:69:39:10:c3:3c:0f:d1:59:
13:9f:4f:35:0f:75:a8:fd:94:7b:0b:46:3f:58:5a:b5:d0:55:
5e:83:b4:79:fd:9d:45:6b:e9:3a:8f:9a:6f:d1:85:ac:20:f9:
18:59:ca:f8:38:ef:8a:a0:7f:01:61:14:be:ef:bc:4a:1e:23:
6d:10:b4:5c:42:43:42:fb:17:8c:d8:8c:5e:74:ea:8f:49:2b:
21:6f:af:49:cf:d9:dc:13:9c:3f:65:45:6c:70:95:ce:86:de:
14:b2:18:7d:40:1f:7f:92:27:61:c7:57:b9:b4:92:7a:47:03:
3f:c8:6d:a6:b5:69:d6:96:42:b8:d0:99:f8:67:43:ed:c0:49:
64:7a:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:32 2025 by rpki-client