Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer (raw, json)
Hash identifier: IVjWKKjY3kaB2tl7vI11Qayd/4aYxDchHrYw21M8fuc=
Subject key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0F8F3C88FFA67EB83DBC430B90A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206978
IP: 149.249.12.0/22
IP: 185.196.29.0/24
IP: 2a03:e440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0f:8f:3c:88:ff:a6:7e:b8:3d:bc:43:0b:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:3e:c3:f2:80:63:49:1c:cf:5a:a9:b0:c7:
5b:dd:9d:52:a0:67:f4:0c:22:61:ed:dc:67:f2:c5:
6c:93:e8:e4:44:fd:ec:38:7a:e2:d9:b5:2a:94:44:
ac:c3:19:c6:a2:37:cd:cc:ac:61:e7:f2:12:68:b7:
05:8f:84:9a:81:62:b6:cb:1c:fd:be:e8:b0:3d:ec:
4c:06:b7:d8:db:e9:ae:6c:c9:32:49:ad:9e:d2:75:
2b:d5:75:12:8a:66:cf:ea:ef:22:99:f2:34:a5:5b:
00:03:02:e3:7b:66:a0:ec:c5:ab:73:1c:d2:02:60:
c2:60:f9:5e:b8:bd:49:20:5d:5a:34:1c:4a:2a:33:
f9:4c:d6:0c:77:37:81:89:99:91:f7:52:dd:ce:b7:
63:4b:03:c2:a8:50:bb:1a:04:da:7a:b3:d8:41:39:
28:1f:c3:73:61:08:53:a6:12:f6:62:55:e0:de:ea:
8a:a6:e8:70:e2:39:c2:09:d5:8b:9a:d2:45:cf:48:
c5:96:76:dc:69:f3:ab:5c:41:4e:90:f0:bf:9f:c4:
8f:6c:05:c5:f2:09:c3:88:e6:1f:e5:1e:47:16:b1:
0c:53:76:67:ab:9a:67:a3:c2:2a:82:55:66:96:c2:
98:50:c2:4e:49:27:55:fb:48:54:8d:00:97:42:90:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.12.0/22
185.196.29.0/24
IPv6:
2a03:e440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206978
Signature Algorithm: sha256WithRSAEncryption
19:a0:d0:6e:93:46:67:a4:4e:b4:2d:28:1b:99:95:40:de:09:
81:6d:3b:62:e5:56:c0:99:1a:7e:ed:90:3b:bb:70:e1:64:13:
e3:03:67:a9:6f:31:d4:fc:1f:d1:a6:32:27:56:6b:9f:1b:b9:
c2:5e:cb:89:75:92:cc:7d:d3:38:18:46:7b:e0:f3:90:e4:6b:
e3:ba:ac:ca:d5:d7:51:61:6c:4f:e1:04:29:62:3e:0c:a2:e4:
90:73:56:0c:5c:f5:9a:c4:69:75:01:ab:6d:b5:d0:03:d2:f8:
b2:de:c0:23:e0:56:7e:51:4a:75:ba:42:3d:f9:84:84:99:b2:
fe:37:79:ff:36:d2:83:f6:33:f3:e6:68:23:c6:48:cc:22:eb:
3c:9e:da:97:2a:0e:3e:4a:8e:0c:cd:b6:9f:e8:c5:c9:27:08:
47:29:4c:e6:f0:26:63:84:54:1a:86:db:f4:99:7e:10:cf:43:
0b:17:c2:45:97:53:7f:7f:e0:b4:31:1e:b3:31:18:c7:c5:cf:
ce:e9:c5:ea:19:da:09:dc:57:38:e5:0c:b7:6b:ad:e1:67:a4:
6b:fc:24:71:c6:2d:a0:a5:5b:06:b6:74:65:71:07:4e:3c:ae:
17:f4:fa:1e:8f:d5:47:2c:da:4e:00:ec:c8:dd:52:bc:96:9d:
d5:40:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:30 2025 by rpki-client