Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer
File: i4gBVDgSBAR31HRCKUZshTfUUXE.cer (raw, json)
Hash identifier: vA/xBU+C6L12cQfLOnH4FbIb2kROwF+Do+Gh1Bjx4gg=
Subject key identifier: 8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDB652673AF60C503AA035F1D89841
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21054
AS: 212885
IP: 193.163.122.0/23
IP: 193.178.116.0/24
IP: 2a04:5580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:52:67:3a:f6:0c:50:3a:a0:35:f1:d8:98:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b8801543812040477d4744229466c8537d45171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:f2:09:bf:0d:62:2d:69:67:a1:6b:af:ae:
45:55:17:66:f2:c9:b2:c0:e4:88:14:f9:e5:2d:b4:
5c:e0:3a:ba:e5:b6:a0:6a:a1:0c:2f:af:72:2d:39:
83:3d:a5:68:9a:45:6d:f0:e3:5f:dc:7f:b2:c9:7e:
82:7f:7e:36:cb:84:3e:4f:ed:90:6c:e1:8c:d7:a1:
c6:44:46:28:53:a8:9e:12:d1:de:91:9b:17:34:d2:
96:dd:60:8c:e4:58:d6:97:ea:34:8b:4d:78:86:b4:
18:00:69:c9:f9:c6:a9:5a:2d:84:bd:cb:ac:5c:bc:
fb:47:e7:38:c0:db:b8:15:a7:01:ca:51:59:05:71:
94:7e:c3:eb:db:0d:72:ae:b8:e4:4d:a5:1e:3d:1e:
54:37:ff:2d:31:a7:62:0c:e9:18:5d:9c:be:7b:a4:
42:dc:6e:6d:47:c1:58:03:23:3d:41:49:8b:a7:85:
9a:ff:35:71:25:e5:34:24:22:c7:2f:f4:2c:52:ad:
b5:3a:0f:40:8b:36:70:cf:4d:4e:e4:e3:d9:69:d9:
7b:8c:bb:e0:e1:2c:3a:83:22:c8:31:87:83:03:eb:
4a:28:17:da:8a:ae:fe:f8:a3:b6:df:ad:f4:3c:bd:
c7:1a:76:96:f4:b7:6d:53:37:86:00:eb:82:b3:92:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.122.0/23
193.178.116.0/24
IPv6:
2a04:5580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21054
212885
Signature Algorithm: sha256WithRSAEncryption
af:db:e1:e6:9e:b6:b4:9a:8c:b3:62:60:b4:21:ca:bb:e7:44:
4f:60:fe:d0:e1:7b:b9:c2:29:f6:31:2e:2e:4c:f2:c3:ec:48:
f4:00:71:7c:c7:21:f6:42:ef:55:30:35:03:c7:99:55:bb:94:
9c:0d:b1:79:3f:46:7a:af:04:fa:9d:cc:88:5c:61:9e:d0:8f:
39:14:10:cf:c4:2f:89:75:f1:62:35:3a:be:bc:f0:4a:40:59:
95:dd:df:da:8e:f4:a3:b7:39:0b:42:74:0d:c5:71:7f:34:3a:
e6:74:36:32:a0:10:5d:da:1c:09:e3:a7:0f:14:65:a3:04:1d:
e3:f4:c2:05:7e:af:68:35:41:68:55:63:59:19:70:4b:b3:32:
6f:39:d4:fe:1d:a7:5e:cc:9a:ac:04:a6:89:54:a7:0c:32:34:
34:73:5a:97:1f:e8:02:0e:1e:27:6e:b2:9e:5c:bc:7b:94:a9:
86:42:61:2e:e5:c4:61:0f:9d:f2:86:c2:4f:ea:7d:9e:fa:12:
b5:c5:3f:68:a0:b8:e4:3a:ce:72:1d:78:38:28:a8:7b:1a:2b:
db:9c:ff:49:b7:f0:54:ac:52:b1:f5:3f:71:ec:44:86:d7:44:
59:45:d1:7f:3d:c5:cd:fa:1d:88:e0:4b:81:01:62:0f:cd:9f:
88:fa:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:58 2025 by rpki-client