Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.cer (raw, json)
Hash identifier: hjC5p/aS/Tuy+7vEqDvz4K1u9HxVxEKp/RNTQ+2dlwk=
Subject key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7D1D6CE74A8B97F77C8F43A2DE896
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56634
IP: 192.162.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d1:d6:ce:74:a8:b9:7f:77:c8:f4:3a:2d:e8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:2f:ae:f8:fb:0a:24:66:b5:c8:55:41:f2:
a7:10:07:c5:18:08:41:95:97:cb:f5:82:85:c5:8f:
ae:98:d5:cb:ca:b0:8c:5b:2d:1e:20:a2:67:e7:32:
75:7d:7f:ce:e6:1a:b0:1f:06:cf:a7:b4:a4:fe:ec:
ac:bf:a0:f2:27:f4:03:f6:a6:95:81:2f:95:48:24:
7d:69:7c:85:32:2c:6a:2e:27:02:bf:3c:cb:a2:4c:
41:6f:bd:25:2e:b5:e6:2e:2f:85:9f:94:67:77:7d:
8e:b5:3b:71:a1:04:79:12:7f:a5:f1:9d:dc:c1:ee:
4c:ec:0f:a3:df:79:fd:32:db:11:da:0a:80:66:ec:
a8:99:b4:ed:0a:08:f0:76:dc:0f:60:da:fa:cb:f0:
f0:0c:02:67:9c:1f:f1:ff:f2:f7:a9:d2:7d:1b:79:
12:4a:9b:4a:d7:c5:1b:16:cb:44:49:dc:7c:45:e7:
d6:86:03:c5:db:1d:62:ac:ea:db:f4:9c:f4:c0:a5:
21:96:01:4e:ff:cc:97:a2:08:4b:65:bc:0c:f7:a3:
9b:c0:13:7e:13:21:54:a8:8d:0d:e2:4b:a6:44:a6:
eb:ab:4d:d7:53:00:ec:e0:7a:d9:ae:16:08:87:51:
29:14:29:62:b0:ef:b1:d0:81:da:cb:6d:9b:0a:3e:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56634
Signature Algorithm: sha256WithRSAEncryption
8d:ce:c2:32:3d:ab:e0:cc:ec:cb:47:3f:e4:b0:3a:1d:38:17:
9e:f4:31:72:af:e8:01:32:61:f8:04:3e:4d:08:59:ce:9b:14:
8a:59:b8:9e:8f:65:9c:e7:03:19:b3:45:a7:72:45:f8:0d:9e:
ba:d1:ab:be:2c:88:9b:c0:99:d8:76:b2:c3:d4:84:63:cd:c0:
ab:3d:87:d5:14:50:cf:7c:8a:87:de:54:1d:37:9b:9f:fc:05:
9c:d0:da:89:1f:70:0e:f7:11:63:a1:32:19:07:b5:35:93:e5:
e7:9b:bc:92:3b:23:05:9e:e4:68:3a:2b:6b:38:9f:17:ab:b0:
c6:74:4c:7b:c7:9b:be:ea:02:eb:a1:81:9a:25:49:de:b9:c1:
dd:fa:40:0a:eb:8a:0b:d5:a1:d1:c4:55:ef:71:5a:22:78:c2:
a4:8d:d8:43:55:8c:3e:11:46:f7:f8:2f:6f:8b:a7:ed:3e:d0:
be:cf:24:95:ef:0d:98:9a:27:4d:f2:fc:77:e6:cb:b9:68:b4:
ca:99:87:cf:4c:e9:02:75:ca:e9:8d:97:13:0b:78:a8:3b:b7:
49:a7:06:d4:fc:ce:c5:32:22:7b:d0:6d:6a:9b:47:cb:5e:6b:
a7:4a:4e:56:bc:2d:3c:1c:b6:6a:60:5e:71:c4:cc:41:6b:28:
32:e3:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:31:29 2025 by rpki-client