Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
File: kMuqazbmzWh0x47UWk-N1xcwMdk.cer (raw, json)
Hash identifier: 8yoFXLT3sh9HSoJCIG116jGI6AyXbhHhy799SWS1RTI=
Subject key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B618AC0C955A2C6BAF68E138232B2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204922
IP: 185.235.208.0/22
IP: 2a0d:7500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:18:ac:0c:95:5a:2c:6b:af:68:e1:38:23:2b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:e3:66:b8:1c:33:42:be:c6:01:c5:e2:68:
2e:e4:f6:6d:cc:af:4d:07:b3:8b:db:88:97:60:22:
b0:74:51:82:f9:fc:53:eb:c2:93:cf:aa:ff:5c:f2:
28:d1:3f:3a:d5:23:80:8b:52:62:76:20:ec:8d:a5:
f9:3c:72:a4:bb:f0:b5:67:1b:e2:3f:71:54:61:44:
97:a3:c9:f2:af:84:84:96:8d:fc:b2:ce:e6:04:d9:
5e:43:8e:8f:ce:21:4a:9f:0d:06:48:af:6a:56:83:
fb:67:6a:68:26:33:5c:35:73:47:29:77:61:62:3d:
fb:24:99:00:cf:3b:03:f6:e0:db:b2:6e:66:f5:d5:
42:81:a9:d5:7d:7c:2e:36:af:09:95:45:f7:79:9e:
e2:c1:c0:ca:27:a3:e0:cc:5c:5a:2a:eb:de:82:93:
a9:ff:57:c0:29:7d:96:e4:50:a1:3c:48:f1:01:d8:
b4:68:62:e4:19:58:69:2e:7c:e2:df:ca:22:80:47:
9d:f4:ff:71:03:d0:e7:fd:5a:9f:b7:4a:34:db:87:
a9:db:bc:33:42:8f:de:39:9d:09:c8:9e:9f:ef:ef:
b6:5f:fd:54:e6:cb:ef:98:33:87:93:a3:f9:9a:6d:
27:9a:80:24:59:28:0e:86:d0:f0:28:86:61:cf:38:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.208.0/22
IPv6:
2a0d:7500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204922
Signature Algorithm: sha256WithRSAEncryption
5c:a5:78:8e:11:f7:25:70:58:ca:21:d7:f5:91:75:2b:8f:93:
dc:7b:24:66:1f:ef:f6:39:fd:b9:d2:e9:e6:dc:06:b9:33:7e:
b8:a8:9d:31:2c:bc:26:e3:b5:9d:62:f0:8a:7f:67:6f:27:a5:
e7:33:03:65:34:9d:06:67:0d:43:5f:81:27:9d:8c:9d:d0:78:
15:40:d7:43:28:67:ce:1e:44:a0:20:ec:a8:d1:0d:77:b8:cb:
2d:ce:78:be:19:9d:6f:be:33:1e:02:aa:f5:11:85:76:c8:bd:
e0:4b:bc:e8:f7:07:de:50:55:24:8e:bf:e6:d7:d4:b5:03:51:
5b:68:79:3e:48:48:67:e2:7a:63:d1:54:e0:49:70:7a:3e:03:
d2:02:af:d3:92:30:50:4a:b9:fe:85:86:72:ab:57:a9:e5:02:
3b:a3:65:88:37:39:ed:53:35:f7:34:b7:04:65:66:42:6c:dd:
b5:97:bb:17:28:ac:55:6e:2d:c8:9b:30:cb:0f:3f:e1:1a:0e:
ab:d5:24:53:8f:47:3c:8d:3f:12:bd:c8:ca:f6:4e:e6:b5:19:
34:50:27:c3:bb:19:73:86:0c:1b:fe:cd:8d:4d:c4:83:c3:df:
c5:1b:66:3f:5a:31:b8:25:b2:11:ab:f8:03:72:d0:f3:f5:00:
0f:8a:f2:01
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQnthisDJVaLGuvaOE4IysqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGNiYWE2YjM2ZTZjZDY4NzRjNzhlZDQ1YTRmOGRkNzE3MzAzMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIDjZrgcM0K+xgHF4mgu5PZtzK9N
B7OL24iXYCKwdFGC+fxT68KTz6r/XPIo0T861SOAi1JidiDsjaX5PHKku/C1Zxvi
P3FUYUSXo8nyr4SElo38ss7mBNleQ46PziFKnw0GSK9qVoP7Z2poJjNcNXNHKXdh
Yj37JJkAzzsD9uDbsm5m9dVCganVfXwuNq8JlUX3eZ7iwcDKJ6PgzFxaKuvegpOp
/1fAKX2W5FChPEjxAdi0aGLkGVhpLnzi38oigEed9P9xA9Dn/Vqft0o024ep27wz
Qo/eOZ0JyJ6f7++2X/1U5svvmDOHk6P5mm0nmoAkWSgOhtDwKIZhzziKEwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJDLqms25s1odMeO1FpPjdcXMDHZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzA2Y2E1
ZC1kMGM0LTQyMTUtODk2OC1iNmQ0YzRmYzBjMjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMDZjYTVk
LWQwYzQtNDIxNS04OTY4LWI2ZDRjNGZjMGMyMS8xL2tNdXFhemJteldoMHg0N1VX
ay1OMXhjd01kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuevQMA0EAgACMAcDBQAqDXUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMgejANBgkqhkiG9w0BAQsFAAOCAQEAXKV4jhH3JXBY
yiHX9ZF1K4+T3HskZh/v9jn9udLp5twGuTN+uKidMSy8JuO1nWLwin9nbyel5zMD
ZTSdBmcNQ1+BJ52MndB4FUDXQyhnzh5EoCDsqNENd7jLLc54vhmdb74zHgKq9RGF
dsi94Eu86PcH3lBVJI6/5tfUtQNRW2h5PkhIZ+J6Y9FU4Elwej4D0gKv05IwUEq5
/oWGcqtXqeUCO6NliDc57VM19zS3BGVmQmzdtZe7FyisVW4tyJswyw8/4RoOq9Uk
U49HPI0/Er3IyvZO5rUZNFAnw7sZc4YMG/7NjU3Eg8PfxRtmP1oxuCWyEav4A3LQ
8/UAD4ryAQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:04:44 2025 by rpki-client