Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.cer (raw, json)
Hash identifier: 0+xlgil9m3ttFMqV+K8AEJzGoDlg6f/9arQMTiE03d0=
Subject key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427477BD2859B296AF689A7515E11E86E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198438
IP: 91.234.180.0/22
IP: 2001:678:178::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7b:d2:85:9b:29:6a:f6:89:a7:51:5e:11:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:81:d3:ed:d2:30:47:fc:94:60:76:61:de:
cc:a3:e5:c9:75:e1:96:3c:a6:22:43:17:06:70:ad:
0f:07:66:c3:d9:82:97:e1:4c:26:19:78:6d:6e:f7:
2c:06:be:00:0f:3e:32:56:ff:6f:8a:27:aa:88:c7:
58:d4:8c:9f:37:1f:75:d0:40:a5:a8:18:a7:d3:c7:
14:75:30:bf:c3:e0:45:70:87:ee:ab:29:ac:79:e7:
af:f5:91:ad:81:e2:1c:43:30:e2:b5:e7:83:38:2c:
dd:dc:cd:db:4a:ec:07:7f:7b:b9:d1:91:1f:0a:ba:
49:d7:7d:c8:56:7d:1e:dd:dc:62:cb:72:df:bf:65:
8a:ec:e1:67:d6:60:f1:d3:d4:3a:60:17:e6:9c:a4:
5e:65:e8:4d:7f:04:68:42:96:f4:fd:3d:ff:e4:d2:
c7:f3:52:a8:7e:ca:7b:fe:f9:38:dc:f9:d9:2d:69:
1a:8e:7b:f7:4a:33:23:ae:d5:83:12:58:4d:a0:cc:
8b:a1:1d:dc:09:a4:4a:59:47:30:1a:b1:0f:f5:f4:
d0:07:b2:39:50:91:76:6d:9f:8a:18:15:e0:41:8e:
ac:f9:7c:19:d8:88:ec:18:80:b1:99:7e:38:96:5a:
5a:a5:e5:d5:e4:d6:b9:8a:5d:61:40:1c:ef:fb:bb:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.180.0/22
IPv6:
2001:678:178::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198438
Signature Algorithm: sha256WithRSAEncryption
8a:cf:9d:c8:46:3a:41:f1:c6:9f:70:5c:56:56:c7:82:aa:8b:
32:b8:43:98:f5:60:49:3b:1c:17:d3:9a:40:86:fd:c7:c7:66:
fa:7b:8a:7a:68:28:78:ea:39:8e:f6:ba:36:86:f5:5f:28:ef:
28:dd:07:e1:19:bb:92:60:6d:55:64:03:d2:9f:8c:9b:5d:f1:
3b:ea:43:c3:30:54:ad:df:3b:93:a7:ae:c4:ba:94:83:d8:aa:
b0:a3:2f:58:d6:42:80:00:af:f3:01:dd:ff:7b:3a:9e:67:14:
48:ef:65:f5:75:1a:fe:b8:85:95:d1:8c:d0:ee:55:d4:be:c9:
fe:46:75:4e:28:0d:3b:80:31:0d:5a:04:3f:58:3d:88:54:b4:
b8:40:e6:4f:2f:43:21:18:79:c0:a0:5a:4a:22:09:6f:d7:53:
3a:9e:41:6b:45:12:d7:2b:02:e2:c7:d7:03:c1:ac:29:4f:60:
aa:45:ae:43:c1:c4:5a:b2:af:35:6e:3a:ca:fa:b4:56:0d:ff:
a4:df:9c:1d:15:c7:f7:33:31:7d:e7:a1:61:e0:99:92:89:38:
f0:0f:85:f6:aa:4a:60:c9:73:c5:e6:1a:b4:00:8c:cf:89:c8:
d8:4d:7d:d0:db:78:cf:39:2a:7c:d0:21:96:a1:b4:5d:1a:af:
ad:92:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:41 2025 by rpki-client