Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
File: fewnmwUBcwaYowvNzqOuR3yVczE.cer (raw, json)
Hash identifier: VgEnRa0+wKMWYIqGxfJh85MeryqHdP9OP6xRPTW+Zl0=
Subject key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5235473950B1FE36C2D6880EB2985
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41605
IP: 185.82.148.0/22
IP: 2a03:68e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:23:54:73:95:0b:1f:e3:6c:2d:68:80:eb:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dec279b0501730698a30bcdcea3ae477c957331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:e8:76:4a:9a:cd:59:00:fa:2f:2d:65:47:
ab:47:37:f2:49:08:e4:52:b0:af:60:9a:4c:4f:d9:
c2:c0:ea:3a:b6:af:d2:80:9c:57:10:85:7b:ce:5d:
83:b7:b2:e6:e5:f8:4c:17:18:58:7d:a1:23:64:29:
38:d2:e9:49:42:9a:18:f4:ae:b8:29:3d:bc:ec:f1:
c0:4b:db:98:40:8c:4e:e6:6c:2b:b6:d6:0f:97:73:
f5:4c:e6:77:cf:ec:dc:84:2c:1f:05:e0:c4:56:e7:
86:fe:1c:ff:9f:6c:1a:7c:9d:13:4b:6d:1d:1d:b4:
0b:9f:86:6b:ae:39:72:22:16:62:49:aa:5d:fa:43:
6c:99:d1:f1:5e:2d:a6:4e:05:2c:76:19:b8:a4:b9:
4b:db:d3:05:12:ac:ef:1e:16:09:3e:c9:81:62:2a:
fc:b2:f1:ba:59:0e:15:3a:dc:12:ae:1d:5f:e7:e6:
14:2e:52:69:6d:e7:79:59:37:24:01:78:33:15:44:
fb:de:ca:b7:00:66:2c:97:36:e7:c8:f0:48:09:3d:
89:26:86:a3:a5:39:e3:49:40:8b:eb:f5:9d:a0:14:
a3:0a:50:08:21:fa:58:38:8c:81:10:05:0d:e8:f7:
3f:35:f4:33:13:6a:ea:a3:da:9a:86:ac:da:95:db:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.148.0/22
IPv6:
2a03:68e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41605
Signature Algorithm: sha256WithRSAEncryption
61:86:af:96:35:9f:97:65:a5:9e:7f:c1:28:a9:75:2c:e4:1a:
28:b2:e0:57:33:78:63:d6:cc:1b:db:67:7c:2c:cd:71:a1:7d:
3e:58:29:a3:e7:d5:ef:90:84:28:51:9b:14:49:9a:10:2f:f5:
d1:80:fe:5b:c7:86:1c:3d:59:40:97:fa:21:7a:5d:d1:fa:2e:
25:c6:cd:e3:76:44:2c:c9:1c:1f:c8:84:59:90:fe:62:b2:98:
fe:0f:49:47:16:43:86:a3:86:9b:0d:bf:18:61:f9:f4:88:5d:
b0:47:d1:0d:e4:e0:fc:26:9e:df:52:32:ec:de:dd:fc:62:d2:
49:87:5a:09:fb:d7:52:34:b6:4f:0d:ff:c0:bf:fd:6c:d0:66:
c0:18:02:ba:b7:66:43:3a:4f:4c:7b:9d:a8:99:95:fe:9b:f0:
67:0c:e3:d4:ea:56:30:72:88:fc:00:3a:2e:21:62:6d:c9:9f:
67:e8:54:4a:b4:d6:33:f3:62:11:16:e6:0f:6a:84:4d:c3:79:
bc:d0:fa:df:85:0b:60:6a:e5:39:9a:42:42:1f:5a:23:5c:19:
7e:6d:fd:19:01:e6:82:45:25:b1:d4:57:17:69:05:36:c3:76:
9a:36:13:07:f4:29:0d:0d:9a:68:8c:43:f0:8b:55:0e:48:0c:
1d:0e:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:55:07 2025 by rpki-client