Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
File: jZg6B-bbi8SUyI370TF7qBDS0no.cer (raw, json)
Hash identifier: 86gJJEjfrxLcdyipRoCqvgZWO7qmsKJXbvyQeZzLfuY=
Subject key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B4DB65065FADFED9F96756BC2177
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212606
IP: 185.178.49.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b4:db:65:06:5f:ad:fe:d9:f9:67:56:bc:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:41:a1:e0:2c:62:e9:ac:d1:0c:bc:08:0f:
80:eb:0f:02:ca:8a:8d:75:f1:10:7b:a2:a9:eb:17:
9b:74:78:e4:25:73:67:01:15:08:de:38:6e:8b:24:
08:ec:ec:d3:9a:c1:99:76:68:71:d8:d5:e0:bc:b5:
2a:61:3c:aa:fe:ff:23:f4:d7:a9:0e:29:84:1f:33:
f9:27:6c:f3:21:ae:8f:60:61:24:3e:06:8e:a2:0e:
af:c7:93:77:0e:3b:96:f0:1c:ba:85:af:83:7b:4a:
df:10:b2:1f:8a:03:11:43:74:c3:f7:5b:85:70:01:
2b:8e:fe:2d:a0:15:9b:52:79:65:2a:f1:5c:9e:a0:
80:31:f0:2b:f2:09:95:92:87:fc:46:e3:26:d0:18:
e5:57:a3:aa:17:3f:b1:6e:33:b1:e5:e6:86:b3:52:
bc:0f:7f:db:3c:b6:10:40:06:a4:07:13:56:c9:c8:
21:bb:6a:4a:a8:8c:bd:11:40:81:89:99:ed:f6:fd:
8c:f9:d8:3a:3a:5c:23:ae:56:7f:65:41:b0:99:91:
4d:d4:f9:35:09:8e:46:15:c0:be:4e:53:d0:93:68:
0a:ea:11:29:09:33:ca:7c:af:8b:25:83:b4:e0:d5:
cb:e0:62:83:78:5c:a9:fb:bc:5c:70:a1:cc:16:78:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212606
Signature Algorithm: sha256WithRSAEncryption
12:96:65:17:9a:2d:ec:a8:28:55:44:93:1e:1d:01:ad:65:73:
c2:c4:e6:80:99:4c:fc:e3:60:a9:b6:00:38:cc:35:a1:46:48:
3a:2b:30:a2:6f:0d:11:95:15:dd:f4:6b:22:4b:8e:7a:bc:38:
0c:06:96:cf:83:35:f8:a6:e4:9d:66:e8:77:82:50:62:07:fd:
c2:ee:22:25:7a:fe:ff:e7:00:8a:b6:33:fd:9a:39:9b:e7:9d:
cf:c9:45:95:98:58:a5:8d:8b:fe:11:40:67:19:35:a6:58:42:
62:c5:3e:90:c2:75:85:9b:a1:03:c5:aa:25:c0:10:cc:cf:20:
d6:a2:3a:7e:2e:c0:17:41:99:5d:67:a2:f8:73:e7:6e:9e:8a:
b2:f8:63:3d:50:72:dd:b8:44:c0:ef:da:80:83:96:f6:c1:20:
1e:83:cd:16:3d:2f:b6:cf:62:18:ec:e9:ed:fd:ff:ce:19:17:
74:47:00:a7:3f:fd:36:13:a0:b1:68:51:4d:b1:65:05:00:0f:
a6:66:7f:2e:b7:40:8d:84:e0:d4:87:59:79:6c:df:e4:d3:36:
be:73:7d:70:1a:5b:6c:04:c2:85:cc:6c:29:73:a6:95:77:b9:
8b:cb:de:8f:70:9a:82:b8:63:0a:c2:55:7b:8d:ea:23:0d:da:
3b:1e:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:01:59 2025 by rpki-client