Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
File: is3dXDDVgOsP7soqFs9cWoslaP0.cer (raw, json)
Hash identifier: xbJGGdEkL7IJl9WEK/2HIcGjfw0NOQFFqbJ8tiMtHA0=
Subject key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D232761B8CFA9BB3D705A0D10A3CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209936
IP: 185.242.164.0/22
IP: 2a0c:e780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:23:27:61:b8:cf:a9:bb:3d:70:5a:0d:10:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:52:15:8f:1e:f9:87:25:19:60:1c:39:01:c7:
9c:54:b4:08:28:01:11:dc:4b:a2:be:de:a0:a2:bd:
44:57:e5:6b:1a:69:29:63:2e:07:e8:29:f4:e1:e8:
6b:41:41:46:7d:93:e2:3f:cd:85:b0:59:55:7d:f1:
6e:48:89:e5:ee:97:3d:61:1d:20:ea:59:00:4e:42:
86:ec:da:57:8c:04:df:9b:a4:99:a1:11:4d:7a:37:
a4:85:d5:44:e7:19:d0:de:9a:b4:32:e1:58:60:08:
a6:5a:36:9c:96:4a:ea:6d:87:22:98:bf:d7:a6:1f:
4c:5f:a4:18:46:ab:43:2b:9c:84:10:11:e5:66:63:
01:49:54:e4:cd:db:ad:e8:bb:e4:23:e6:5a:be:56:
8e:32:db:b2:2b:75:89:92:d7:a3:67:c6:0a:ab:de:
3c:bf:a1:99:75:68:37:5b:aa:d2:77:80:f4:2a:78:
2d:74:7b:2c:cf:7d:b0:bb:b2:bc:35:79:e6:57:e1:
2e:8d:28:6a:04:f5:c7:b4:f4:1e:2b:71:03:17:e3:
ff:c8:3e:2e:e3:79:b5:b1:57:93:c4:e6:6e:d6:48:
9d:72:88:fc:0e:de:d6:24:db:81:16:ef:2c:d2:1a:
76:c6:b7:82:93:aa:05:5b:05:6d:63:42:39:94:fb:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.164.0/22
IPv6:
2a0c:e780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209936
Signature Algorithm: sha256WithRSAEncryption
20:24:d8:f0:81:f5:e9:3b:1d:00:32:04:94:bf:7d:20:5c:bd:
a8:43:f0:1b:cc:0a:0d:17:50:a2:53:d9:87:d1:9a:c8:b5:a6:
fc:6a:01:f0:ed:e6:09:76:eb:20:9f:65:e9:a5:0f:c5:94:60:
93:c3:e4:b6:b7:b8:03:df:74:5b:1f:7f:9b:21:ce:55:a1:05:
73:74:32:c1:80:de:59:9f:5b:df:0d:fe:52:dd:b0:8b:45:b6:
35:c9:54:ae:a6:bc:f2:76:7d:ad:7a:33:a8:06:f0:1e:6e:2e:
a1:ca:03:3f:a3:8b:10:5c:1b:40:64:31:a0:14:e7:02:1c:94:
17:e2:ab:0c:de:33:10:e7:f3:d3:7b:99:53:ea:c7:65:54:e0:
0e:82:bc:35:bb:fd:2a:a4:23:05:09:be:4b:f2:86:48:17:4e:
38:f7:16:b8:d1:c3:03:3f:a2:5d:bd:73:44:ec:c5:1f:1e:f0:
8d:69:c7:2d:28:9a:b4:2c:16:b1:ca:54:b8:47:9e:b6:3e:97:
d2:5c:7a:08:d2:c1:1f:81:4e:88:30:3f:15:1c:24:f5:20:13:
1b:28:14:8b:2e:01:84:02:98:b1:f0:08:2c:f2:b9:2e:a8:0d:
2f:0e:d6:40:d9:07:90:12:5d:da:3c:71:ec:19:5e:95:89:f7:
c6:e3:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:42 2025 by rpki-client