Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
File: ljKargKzZu0aAbUqwzq-dgWTqAY.cer (raw, json)
Hash identifier: zHC4slHg8zZXzqoWLHu4AcZv+s3utPAoW4NVMqA8xtc=
Subject key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB003C940B5C65477E125E33672C1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50453
AS: 202796
IP: 185.18.236.0/22
IP: 185.134.56.0/22
IP: 2a03:fb40::/29
IP: 2a05:1e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:00:3c:94:0b:5c:65:47:7e:12:5e:33:67:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96329aae02b366ed1a01b52ac33abe760593a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:f2:23:dc:fc:5b:1c:2b:39:09:1d:ec:74:
7e:9a:3d:cb:1c:cf:25:4b:67:08:84:79:3c:17:7f:
cc:ec:a2:66:18:fe:05:a9:da:7b:9e:72:d4:dc:66:
3a:ce:cd:de:86:62:79:74:43:60:0f:7b:cb:cd:1c:
25:6d:ba:f8:14:83:05:18:fb:98:4d:6b:30:04:99:
e5:79:c3:75:9f:e1:51:a4:1a:c4:0d:e4:94:ff:6a:
a6:30:c3:5a:5e:b5:ef:97:6b:43:b8:46:7d:6e:9d:
0c:e0:1c:b6:98:8f:22:f4:f4:a5:f6:4e:fa:0d:e3:
62:b1:82:c8:63:78:ec:92:33:e7:62:b7:10:5e:ff:
a6:bc:84:3a:86:aa:26:50:19:43:bc:88:42:d5:88:
60:c9:d9:c2:0a:ef:3a:0f:57:3a:ff:64:c0:06:f1:
bd:0d:a2:b6:30:16:d7:44:e8:dc:88:d4:cb:63:e5:
ee:41:32:8d:90:17:9f:8b:12:77:9d:a4:1c:3f:40:
98:14:f9:f0:85:a2:1b:31:67:66:59:08:57:a5:c8:
42:ea:82:3e:ba:58:d1:2d:81:ce:b4:eb:e2:a2:38:
74:ca:2b:28:eb:0b:1f:13:e3:99:c9:f8:d1:1b:ab:
d4:1c:f3:f1:14:09:80:b0:39:54:6c:cf:68:2d:01:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.236.0/22
185.134.56.0/22
IPv6:
2a03:fb40::/29
2a05:1e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50453
202796
Signature Algorithm: sha256WithRSAEncryption
56:87:12:b7:59:9c:65:65:6d:0a:24:74:69:f2:77:f5:b5:b1:
9f:66:f0:52:99:0a:03:80:fb:c5:b4:a4:75:85:e2:01:35:e0:
49:25:24:17:7d:33:f7:36:fa:e3:b0:33:5e:26:19:c3:15:8a:
9d:0d:3b:a4:50:3e:bc:8d:a1:7d:51:18:f2:17:f5:c0:27:c3:
a7:0a:fc:5f:11:5d:b2:7b:86:06:99:f5:30:68:df:71:52:cf:
9b:9a:6a:2f:73:d7:cd:f6:33:b4:b7:18:95:35:b8:fc:fb:e7:
fd:cc:34:99:ec:48:1b:37:76:8f:02:93:57:6a:47:b0:cf:6b:
7b:32:45:01:8a:58:5e:f5:d2:f1:d4:82:07:38:b2:ca:92:f8:
97:25:4b:7b:e4:c4:24:ad:91:42:af:74:a1:23:71:43:f0:11:
02:53:ef:0e:00:44:2c:3e:45:f8:a8:bb:49:d7:af:56:bf:d4:
21:e9:63:4c:d0:12:af:16:ac:de:cf:fe:10:dc:e0:d5:ce:77:
98:46:43:f1:0e:bd:cb:6f:63:2b:99:1c:91:7f:d1:09:50:5f:
31:22:e4:89:5f:52:c8:a6:44:55:a4:a2:c7:52:95:75:0b:33:
66:44:83:76:77:09:84:34:f4:4b:f3:fa:d3:bb:31:01:37:aa:
61:2e:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:33 2025 by rpki-client