Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
File: iToqQBmigXfN-AZZnxq11R0XuNw.cer (raw, json)
Hash identifier: Z2pqZOYh7uWvzuqA8n6wu08X/oSTJw6ALOgNukIMNaU=
Subject key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B219675551E8A18CD99C655876449C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202625
IP: 185.158.196.0/22
IP: 2a07:af00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:67:55:51:e8:a1:8c:d9:9c:65:58:76:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:f2:e4:c6:56:34:10:a1:24:1b:54:fe:4b:
76:f7:d7:c1:e6:1a:1d:3b:da:bf:c2:43:90:3d:5f:
fc:d0:8d:25:22:52:a9:4f:91:3e:1e:27:80:7f:fc:
ac:5f:c8:5d:a0:c2:bc:6b:85:39:60:96:6a:c4:71:
54:df:3c:24:c3:43:ea:b3:d2:99:b1:a1:6d:18:0e:
79:74:7e:90:fb:05:5f:74:a6:01:8c:af:bf:ba:50:
8f:5a:e3:de:88:f6:20:a7:36:71:7f:c4:29:4c:ea:
7c:fb:8d:70:14:86:34:24:2f:ab:9b:6c:35:e6:49:
5b:fc:a6:28:61:27:7f:6b:8c:0e:0f:70:45:35:db:
07:f2:04:fa:35:b9:d8:50:25:ae:e4:80:67:21:37:
7b:14:29:6f:4b:98:e0:66:4a:67:89:89:f9:69:71:
bc:9c:7a:23:d5:0e:53:6e:34:65:21:de:26:50:c9:
c2:e6:f1:1b:ff:c5:1c:d8:a7:32:5e:11:16:68:63:
38:7c:39:eb:ec:0d:ff:d3:75:72:eb:23:cd:3f:71:
e2:6f:d8:d2:6f:c1:5c:27:ee:3f:34:f4:d7:ba:5c:
7c:d5:ec:54:ce:9d:2c:02:4f:22:eb:45:c6:af:8b:
c6:51:e0:ff:d0:aa:db:cc:b6:03:49:a8:fe:8f:6d:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.196.0/22
IPv6:
2a07:af00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202625
Signature Algorithm: sha256WithRSAEncryption
40:78:69:84:1f:b0:a9:dd:eb:ff:89:0a:89:05:ba:75:76:36:
b8:40:82:8e:a3:18:16:61:c0:c2:62:e0:3a:53:fb:39:a7:64:
1a:3b:dd:e5:f0:a2:47:5f:62:cb:10:78:42:28:8a:62:af:79:
eb:12:94:90:c6:11:6b:24:f6:af:5b:40:a7:d9:7c:d8:b2:67:
0c:f4:84:ff:04:f0:cf:c2:cf:0a:87:56:db:0e:01:2e:37:5f:
2b:9b:ed:78:ed:84:e4:16:90:5f:0a:5d:5f:fc:fd:5b:82:2a:
bf:d5:85:7e:d5:ee:5c:d5:60:3b:99:a5:61:60:75:94:02:34:
19:7c:e4:97:6e:ce:2a:92:2e:66:eb:23:44:eb:48:67:dc:e4:
b6:de:ed:91:83:25:30:9d:88:3e:b7:96:ab:95:1f:ff:fc:6d:
85:c8:a8:23:ba:7e:40:c2:96:de:6b:64:86:03:50:62:22:31:
d3:c7:6d:79:1c:10:a0:b9:59:e3:e8:29:43:ca:90:47:bf:e9:
e4:8f:3f:b3:cc:f2:d5:c7:71:c2:8b:81:b3:0c:4b:3e:0f:58:
e2:5a:83:a7:c4:b4:fb:5f:15:6b:1c:dc:d0:c3:52:6a:2c:0c:
43:b0:09:3c:55:40:cd:79:f3:79:0e:33:88:13:0a:e3:96:5e:
fd:e9:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:02 2025 by rpki-client