Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.cer (raw, json)
Hash identifier: ExBVDjf077jMjU7496zLb75487qHXGobMZIqVaxki5w=
Subject key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424459C3F60FAC3438E35E4807A880D4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56495
AS: 56703
IP: 31.40.0.0/21
IP: 91.226.224.0/23
IP: 194.26.117.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9c:3f:60:fa:c3:43:8e:35:e4:80:7a:88:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:20:33:6d:97:fc:d9:66:a7:d7:19:c2:36:
cf:97:99:f6:bd:4f:e8:01:e7:c7:1a:e8:69:23:ba:
76:d5:60:86:5d:e6:9f:3f:5d:a4:7d:e5:c8:cb:b6:
0e:96:61:8f:2c:f0:fe:ac:b4:8d:95:b2:88:18:59:
36:b9:16:47:e3:70:27:6d:d2:6f:19:2f:1e:87:84:
8d:43:fc:8f:54:fa:ff:04:b5:9e:31:0d:c0:90:d0:
f1:ac:9b:89:17:d5:6d:26:56:fb:ff:6b:dd:f4:8b:
d3:47:92:b6:e8:c1:30:69:12:ee:43:38:0e:7c:fa:
89:8a:9b:09:f1:f1:80:18:13:82:16:60:5a:eb:bf:
20:e8:7a:cb:f3:4e:25:b6:55:f0:c4:dc:4e:8d:74:
6f:c2:8c:07:d6:5d:6f:c8:ed:96:ca:bd:e1:ef:d6:
a0:25:30:30:0b:c9:bc:48:0b:b9:81:11:5e:09:1a:
90:48:7c:07:11:ab:24:7a:75:e5:18:07:0c:a3:1e:
fe:14:38:83:e2:e4:a1:a6:6b:13:f7:00:29:6b:13:
17:e8:75:e8:fc:59:9c:eb:f2:9f:ec:17:80:2c:3b:
a2:30:6a:2c:31:db:58:4d:db:08:6b:a0:ec:e9:19:
f8:0f:79:eb:34:c8:3e:73:94:a9:04:24:57:81:f4:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/21
91.226.224.0/23
194.26.117.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56495
56703
Signature Algorithm: sha256WithRSAEncryption
11:1d:c5:d0:8c:77:e9:82:d0:52:c2:05:59:bf:b2:e7:78:f5:
43:7c:35:e1:b8:f6:1e:d0:63:bc:91:6d:21:9e:83:bc:d5:e9:
3d:33:af:64:e6:d8:52:62:04:cb:0e:0b:8f:37:01:d4:d8:ac:
71:b1:b5:08:4a:02:6b:43:b8:9d:af:50:30:06:48:3d:52:2b:
3d:50:77:9e:76:5b:af:8b:a0:43:10:e6:f3:a3:34:1b:04:34:
3f:a7:25:1d:a9:16:0c:65:a0:9c:41:b4:fa:29:5d:0d:b3:ef:
4b:cd:53:50:39:dd:f3:41:1e:c7:d3:6e:be:d2:0c:9a:85:09:
85:9c:1f:f4:fa:cb:ca:d0:a0:51:c8:b6:85:f7:83:5a:69:86:
df:dd:e1:92:b4:34:e9:7c:12:cc:f1:3c:0e:0b:17:9c:35:89:
ba:66:78:e4:e3:7c:09:9d:f8:8b:4c:ce:51:c7:78:7c:ce:d3:
ac:af:cc:9a:a8:27:7f:93:3d:52:c6:24:3e:9d:a9:50:7f:85:
c7:94:cb:19:e4:82:1d:2c:8e:e0:38:a4:c9:22:2e:13:91:cf:
e0:f0:ea:aa:d5:fa:8e:f5:70:4d:a9:3d:8e:d3:db:31:bb:42:
b6:95:4b:c3:26:f8:67:03:34:96:e5:2f:30:d5:a8:92:17:a6:
4f:69:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:24 2025 by rpki-client