Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer (raw, json)
Hash identifier: Rmj2S7gBKa7YRFaR5mEq2Fc0eyxX+raHf2ZC9mDRf9I=
Subject key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D965E21E8D019C6AC3759E1EFA4537
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204180
IP: 185.111.248.0/22
IP: 2a06:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:e2:1e:8d:01:9c:6a:c3:75:9e:1e:fa:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:48:3d:95:82:bc:82:4d:4e:44:04:01:dd:
6a:b8:3c:c8:59:46:b6:66:d7:bf:7b:b8:f8:18:49:
78:23:95:73:81:9e:55:17:11:ab:b9:94:46:f8:1b:
47:ba:ce:66:b1:c8:db:66:6f:75:68:01:a4:75:ab:
ad:1f:16:ff:20:dd:21:3c:75:8a:3e:b9:2e:b4:e9:
7d:71:c8:fb:83:ff:2c:51:a0:9e:81:58:a7:67:21:
18:1c:05:33:7f:96:ee:e4:fc:b4:e7:1d:d9:83:d1:
d2:c9:5f:1e:62:d9:11:13:79:81:f2:20:75:95:d9:
e7:cc:14:17:46:7d:61:34:02:f7:14:79:f8:13:91:
a7:70:9d:08:f9:1e:10:f1:56:7b:52:29:3a:19:60:
92:c4:91:e0:fe:9f:13:8f:e0:18:5f:3b:07:81:1b:
93:0c:c7:52:67:8d:57:68:e7:5b:34:4b:8a:eb:55:
98:8e:09:10:ae:80:3e:ca:d4:7e:fc:ef:4e:85:6e:
4b:fe:a5:92:f4:a4:9c:d8:45:14:ef:0a:fc:bf:1f:
cd:a2:48:35:81:e7:f6:a4:fb:8d:ab:24:c4:69:7a:
43:12:da:f3:a0:66:3c:d7:cd:b3:9f:70:4c:26:f8:
ce:9a:a6:fc:fd:fc:b7:0b:6b:4f:4b:21:35:f1:bb:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.248.0/22
IPv6:
2a06:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204180
Signature Algorithm: sha256WithRSAEncryption
7b:c3:6f:fc:a1:82:85:c9:37:b3:d8:4e:92:29:d3:a1:34:d3:
ae:36:47:06:29:40:b5:06:42:bf:02:4f:c7:74:31:65:2c:3e:
f3:46:e0:87:b7:14:d5:b1:d5:f2:05:6d:58:16:94:b9:3d:20:
e8:bc:2e:21:e0:57:a5:8a:00:69:ef:fe:7d:20:c9:fd:6f:34:
07:62:86:1e:72:c7:e9:1f:0e:0d:7d:8a:41:aa:5a:a1:4f:cf:
05:6a:cc:16:37:99:14:2a:fc:40:da:d2:57:73:a6:ec:cb:4e:
b2:11:c6:5f:9c:89:3d:13:6c:2f:12:bb:72:1d:da:a4:06:06:
43:65:67:3e:a3:0c:63:72:77:81:a9:ce:f4:83:7d:40:99:ac:
7c:06:83:be:3e:25:5d:44:99:fe:8d:ce:8a:98:cd:37:7e:af:
6a:a3:7c:26:c9:e8:f3:bd:a7:5e:06:07:0b:94:c9:d6:a3:3e:
c7:11:37:22:35:47:01:80:bf:03:1b:db:73:f9:23:5c:51:a4:
a2:21:e4:56:1b:bb:71:6f:b6:88:ea:e1:30:0e:dd:c2:f8:1e:
e6:7f:79:51:a3:df:fe:b5:78:62:99:10:ab:bf:fc:98:f2:00:
b6:30:b0:56:71:ef:08:ee:17:c8:b7:c9:b5:be:dc:32:a0:50:
9d:85:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:38 2025 by rpki-client