Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer (raw, json)
Hash identifier: CK/5LEFRCLhXf6WYocSqwY8Ku3PvP7YFotxAXz8vDU8=
Subject key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F7C931DA1CF5182EAD7D937E494CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208410
IP: 212.102.123.0/24
IP: 2a12:8bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7c:93:1d:a1:cf:51:82:ea:d7:d9:37:e4:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:4f:26:08:d1:dd:4a:92:a2:1c:d1:2f:9f:
18:f1:d6:a3:89:da:c4:fc:69:30:02:f1:c8:8d:d9:
01:d7:b7:8d:cd:ed:2e:a7:57:c5:16:b6:a4:85:3b:
58:d0:5f:c2:e3:5f:4d:9e:39:f9:d5:30:b1:c3:89:
b4:7f:c5:20:6f:ed:4f:06:26:2b:7c:77:f4:f0:91:
81:b4:27:46:5b:ab:c6:47:fe:b3:ef:ae:fd:6b:9e:
70:61:9b:df:35:4e:bc:ca:04:af:8a:bc:32:1c:68:
55:71:df:73:7f:86:6c:2a:d8:f5:f7:aa:09:ab:ec:
e5:74:72:29:43:9e:19:8d:f2:30:7e:ed:d1:73:74:
f2:7a:e2:5f:18:b7:c0:42:d8:24:69:93:bb:d5:f2:
c4:9d:c5:0e:40:08:07:f5:aa:73:49:d3:5c:ab:9a:
82:d9:4c:0a:a6:fb:32:db:dc:22:c0:d3:79:b6:fd:
3f:9e:58:e6:d0:99:2a:0a:d1:62:08:8e:df:0b:d9:
0e:95:64:40:a6:52:fd:f1:6b:c3:ff:ef:6c:f9:cf:
db:49:8b:9f:d3:a7:5d:8f:d9:52:a0:04:70:72:79:
b7:d3:5d:55:89:24:bc:ea:1b:de:9d:cf:fb:e9:67:
b6:a6:81:b4:76:e3:43:b4:0d:ad:5d:50:d4:13:0f:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.123.0/24
IPv6:
2a12:8bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208410
Signature Algorithm: sha256WithRSAEncryption
4b:46:00:b0:59:85:c6:67:d9:fa:36:5f:ac:87:0b:fd:bf:5b:
a6:f1:a2:19:cc:79:48:3c:a5:f5:63:b7:af:52:2a:16:9d:67:
a2:5e:48:98:3d:74:8a:fa:a6:9e:46:00:73:27:98:bb:79:8a:
3a:52:4f:11:3f:07:cd:8f:dd:fb:cb:55:58:a0:58:98:50:d8:
d7:f3:4d:25:77:e9:be:46:27:d3:55:d5:29:4c:50:af:e2:98:
e8:40:d7:bb:a2:a3:7d:d1:68:2a:9a:83:31:69:2d:33:06:2a:
ce:42:1c:9b:d8:2b:44:91:d7:db:3e:db:0e:6c:44:77:53:b7:
0f:ea:fb:ac:25:f5:f1:d6:c9:24:01:f2:74:05:a7:58:38:6c:
02:8c:87:75:f8:c8:30:f3:07:58:ba:f8:6c:03:34:88:c4:dd:
4b:80:c7:1d:25:e8:1d:6d:f4:29:ce:70:e5:e5:35:97:6e:31:
1d:6e:6f:e4:9e:5c:74:40:bd:57:09:ce:0c:83:02:fd:a6:a9:
b5:cf:a6:ab:ed:67:db:dd:4c:f4:21:31:fe:98:66:dd:6a:0f:
4c:26:a3:8d:d4:82:d4:b4:0d:7f:79:b3:5b:f4:87:78:7d:5c:
99:b4:73:76:4d:19:d1:e3:5b:79:c7:f5:9c:5f:6a:a1:54:3b:
b6:6d:6a:38
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiH3yTHaHPUYLq19k35JTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjFlZGY1MjZiMWNhNWZmMGU2ODJmZjQ4YWVjZTEyMWQyN2JjMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARPJgjR3UqSohzRL58Y8dajidrE
/GkwAvHIjdkB17eNze0up1fFFrakhTtY0F/C419Nnjn51TCxw4m0f8Ugb+1PBiYr
fHf08JGBtCdGW6vGR/6z7679a55wYZvfNU68ygSvirwyHGhVcd9zf4ZsKtj196oJ
q+zldHIpQ54ZjfIwfu3Rc3TyeuJfGLfAQtgkaZO71fLEncUOQAgH9apzSdNcq5qC
2UwKpvsy29wiwNN5tv0/nljm0JkqCtFiCI7fC9kOlWRAplL98WvD/+9s+c/bSYuf
06ddj9lSoARwcnm3011ViSS86hvenc/76We2poG0duNDtA2tXVDUEw/Q2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIse31JrHKX/Dmgv9Irs4SHSe8DDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2NiNWFi
Yi1iM2Y3LTRkNDAtYWQzNi0yNTExNjhlZGQzZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvY2I1YWJi
LWIzZjctNGQ0MC1hZDM2LTI1MTE2OGVkZDNlNC8xL2l4N2ZVbXNjcGY4T2FDXzBp
dXpoSWRKN3dNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1GZ7MA0EAgACMAcDBQMqEovAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMuGjANBgkqhkiG9w0BAQsFAAOCAQEAS0YAsFmFxmfZ
+jZfrIcL/b9bpvGiGcx5SDyl9WO3r1IqFp1nol5ImD10ivqmnkYAcyeYu3mKOlJP
ET8HzY/d+8tVWKBYmFDY1/NNJXfpvkYn01XVKUxQr+KY6EDXu6KjfdFoKpqDMWkt
MwYqzkIcm9grRJHX2z7bDmxEd1O3D+r7rCX18dbJJAHydAWnWDhsAoyHdfjIMPMH
WLr4bAM0iMTdS4DHHSXoHW30Kc5w5eU1l24xHW5v5J5cdEC9VwnODIMC/aaptc+m
q+1n291M9CEx/phm3WoPTCajjdSC1LQNf3mzW/SHeH1cmbRzdk0Z0eNbecf1nF9q
oVQ7tm1qOA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:19 2025 by rpki-client