Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer (raw, json)
Hash identifier: T9Zwe1Nyli8+hQzNgASuoZ/BaVdJrsRVAV/7ui5lFeo=
Subject key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D5BAF9A95D3433974FF6F5E2BCA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212745
IP: 45.81.228.0/22
IP: 2a0e:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d5:ba:f9:a9:5d:34:33:97:4f:f6:f5:e2:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:e7:31:83:f1:fd:f3:dc:e3:9a:2b:c4:32:
f0:9f:3d:9a:78:3b:3c:17:1f:34:a2:d0:73:af:d2:
ff:3e:93:74:34:39:c1:80:8b:96:e9:57:90:28:7b:
22:50:15:5b:52:8c:f0:b9:8e:71:d4:5f:69:e4:65:
f7:b8:58:df:d9:c9:d5:d9:0e:16:a5:2f:ea:9b:b2:
25:1b:41:5b:98:74:3d:c4:fc:56:05:93:3d:33:ac:
b6:3f:37:d0:d5:48:8a:d7:e9:f2:d2:94:74:74:ff:
c1:e6:36:3f:92:eb:c9:06:7a:98:5b:7d:7b:cc:d9:
13:9a:26:bf:22:7e:75:d3:24:0d:3e:22:4b:f6:90:
a5:57:04:ca:73:36:e0:92:24:c3:37:f4:1e:03:08:
91:7c:ca:30:67:14:11:49:5b:ed:d4:06:33:dd:a1:
47:34:6d:36:90:96:a8:e5:d6:e5:39:0f:54:44:0a:
c2:da:cb:88:62:fa:ed:9e:5c:4e:a2:b5:32:87:73:
e4:7e:65:1b:bf:b1:27:9c:15:6b:ea:38:15:83:93:
7a:4a:89:72:17:ca:d0:3a:f3:e2:ad:81:53:8f:7a:
3d:5d:42:cc:9a:e4:b9:a8:a1:a1:0a:5d:a5:96:96:
e6:e6:c6:55:c3:47:71:21:dc:a7:9b:3d:f3:64:a0:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212745
Signature Algorithm: sha256WithRSAEncryption
ab:cc:ff:99:09:d7:ef:58:8c:39:18:70:b2:59:b3:2d:b8:a7:
60:19:a8:77:c4:6f:95:f1:a4:c6:62:f6:2c:16:7c:ba:29:09:
71:f2:da:b7:c9:bc:27:22:5e:bc:1a:d7:1b:6f:eb:00:a1:56:
a5:ad:04:01:4d:ce:72:01:3a:a6:27:d2:e9:ba:eb:e2:20:ee:
4c:20:d7:30:1e:00:5c:29:93:cb:aa:19:0e:9b:21:db:eb:57:
d6:50:0b:94:5f:fb:52:9c:ce:7d:a3:89:a1:ec:26:77:40:02:
e8:cb:49:86:cd:1e:44:2b:24:eb:12:48:b8:22:06:ed:e5:de:
bd:ec:30:6e:e1:76:81:e6:09:00:fb:bf:8e:0d:fb:4c:db:c3:
0b:74:11:c7:b8:1b:bd:32:40:95:9a:1f:8e:16:11:7a:1a:46:
a8:10:89:69:c2:42:72:79:52:90:81:1c:ad:60:8f:89:cd:3b:
9f:88:c4:1f:20:2f:b4:c7:bf:7f:97:d5:1e:ef:c6:24:a9:dd:
ad:41:ff:d3:ba:9f:78:1c:df:77:9e:8c:96:09:22:b9:b9:53:
95:50:e5:75:13:01:7b:3b:35:1e:81:a4:59:db:cc:d2:d6:6f:
f1:17:38:87:ff:78:01:a9:cf:56:62:28:f7:ab:f2:1a:07:60:
db:c3:4c:41
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1tW6+aldNDOXT/b14rynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDhkNDVjZmUzNDgyYjhmNjFkYWUwMDBiMDA3YTQ2N2VjZGQ0ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqDnMYPx/fPc45orxDLwnz2aeDs8
Fx80otBzr9L/PpN0NDnBgIuW6VeQKHsiUBVbUozwuY5x1F9p5GX3uFjf2cnV2Q4W
pS/qm7IlG0FbmHQ9xPxWBZM9M6y2PzfQ1UiK1+ny0pR0dP/B5jY/kuvJBnqYW317
zNkTmia/In510yQNPiJL9pClVwTKczbgkiTDN/QeAwiRfMowZxQRSVvt1AYz3aFH
NG02kJao5dblOQ9URArC2suIYvrtnlxOorUyh3PkfmUbv7EnnBVr6jgVg5N6Soly
F8rQOvPirYFTj3o9XULMmuS5qKGhCl2llpbm5sZVw0dxIdynmz3zZKCLDwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJSNRc/jSCuPYdrgALAHpGfs3U7mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2Y4OWIy
ZS01M2EzLTQxNTctYTk2MC00MmRhZmI0YjUxZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjg5YjJl
LTUzYTMtNDE1Ny1hOTYwLTQyZGFmYjRiNTFkMi8xL2xJMUZ6LU5JSzQ5aDJ1QUFz
QWVrWi16ZFR1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVHkMA0EAgACMAcDBQMqDmCAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/CTANBgkqhkiG9w0BAQsFAAOCAQEAq8z/mQnX71iM
ORhwslmzLbinYBmod8RvlfGkxmL2LBZ8uikJcfLat8m8JyJevBrXG2/rAKFWpa0E
AU3OcgE6pifS6brr4iDuTCDXMB4AXCmTy6oZDpsh2+tX1lALlF/7UpzOfaOJoewm
d0AC6MtJhs0eRCsk6xJIuCIG7eXevewwbuF2geYJAPu/jg37TNvDC3QRx7gbvTJA
lZofjhYRehpGqBCJacJCcnlSkIEcrWCPic07n4jEHyAvtMe/f5fVHu/GJKndrUH/
07qfeBzfd56MlgkiublTlVDldRMBezs1HoGkWdvM0tZv8Rc4h/94AanPVmIo96vy
Ggdg28NMQQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:46 2025 by rpki-client