Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer (raw, json)
Hash identifier: vct8OOkxUDYQuPgQqfgR8fwnL7rAY1z4k+t5e3CMnYc=
Subject key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6B42416CDE556806172C518D4A30F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197680
IP: 91.213.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b4:24:16:cd:e5:56:80:61:72:c5:18:d4:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:bb:e7:f7:91:a5:d9:77:29:d1:9e:89:51:
e1:8d:25:76:8d:00:6a:e2:0a:ea:09:9d:ac:1c:ca:
c5:5b:45:ec:2b:ec:1e:f0:d7:1a:fc:2f:8e:9e:b4:
0b:08:b9:95:13:27:7a:0f:9e:e1:94:79:d3:45:44:
97:33:9a:ac:70:a7:49:f9:32:11:d5:29:3f:7b:a8:
ef:ed:99:e7:4e:7f:7b:63:4a:8c:35:ae:d8:cb:1c:
e6:cc:1a:5f:16:7f:e5:8b:d6:36:b0:d7:eb:a2:c1:
93:60:24:fa:1a:48:ea:be:5a:6d:3d:16:ad:64:74:
56:e1:5e:6b:16:73:7c:c9:e3:f2:f3:74:5e:b1:4a:
fc:c9:25:cb:fd:45:76:69:36:0e:8d:a7:8d:57:11:
e1:27:85:02:a2:34:a9:c0:01:72:3a:ff:f5:6d:50:
52:0d:d9:f2:92:fc:b5:44:75:b3:21:fd:30:a5:ea:
3d:93:38:3c:c6:b0:23:51:63:07:bb:b0:7b:80:06:
8f:55:5a:6d:09:37:06:8d:7a:2e:23:a6:8e:67:be:
9b:21:a0:34:40:e0:22:1c:9b:6f:dc:58:ce:bb:32:
64:26:db:ed:eb:83:8d:12:95:15:d5:e4:ad:14:37:
11:7d:b7:64:6c:58:28:b8:2f:ae:33:b5:55:ff:6f:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197680
Signature Algorithm: sha256WithRSAEncryption
7f:1a:d9:c8:28:ec:2d:4f:ca:1e:a2:b2:0b:3d:71:29:42:53:
7d:8f:2e:db:a7:6c:77:b1:cc:95:30:61:7c:cd:1d:63:c3:52:
a1:1d:c3:22:fb:ef:05:2f:fc:a2:7a:3d:6f:6f:c7:fc:38:f0:
d3:78:84:e5:f4:88:54:cf:2f:2d:bc:31:3e:ce:a8:6d:3b:7f:
b3:64:fe:ab:36:18:e5:82:32:e6:0c:f9:21:35:ad:ad:4c:cc:
c6:ac:1d:85:ea:6d:ba:a3:3d:87:00:af:8c:63:44:d7:96:bc:
e0:32:11:84:b4:d7:42:7d:4d:92:0e:bd:d8:ef:06:25:99:40:
d5:51:ff:4a:1a:9a:b6:57:7f:8b:95:b6:2d:9b:8d:81:4b:41:
07:30:58:a0:96:8b:d0:00:b4:93:f7:ea:90:5e:95:a4:02:9d:
ec:48:43:b1:6c:7a:29:c5:14:90:1c:f3:0e:57:f4:1f:2b:16:
1d:34:79:7a:77:0d:ea:e1:b3:50:fc:64:30:c1:6d:f8:1b:69:
11:cc:c3:5c:0f:07:33:ab:8d:fa:2b:3a:e5:e0:d6:9d:84:35:
e6:42:7a:42:e4:96:f1:d4:4b:26:4f:c7:24:87:c8:c0:58:4d:
14:a1:fb:bc:27:1a:b0:a4:49:bb:ab:c3:b4:2c:fb:29:ab:80:
16:f2:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:25 2025 by rpki-client