Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
File: mZVu39RteCBhbFZwdNHEt1TxzAs.cer (raw, json)
Hash identifier: 2Mhykm0o6ouwDVmaGcUJZE+CFDTqI7NvtrgyrPHbcnQ=
Subject key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01945F120D5B2096D16CA5351D9DEF03E394
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jan 2025 09:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29143
IP: 194.48.68.0 -- 194.48.83.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:12:0d:5b:20:96:d1:6c:a5:35:1d:9d:ef:03:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:56:7a:57:84:89:79:cc:6e:fc:ad:6d:60:
b4:68:09:a3:ba:f2:83:b0:04:19:aa:a8:e4:db:9f:
b7:d8:a1:7e:0c:28:ef:e1:dc:15:b7:c7:d4:c1:26:
dd:a9:aa:4d:4e:3c:c1:c5:4c:d6:24:58:eb:96:6b:
fb:79:8a:31:cb:e7:84:38:d9:90:34:d0:20:06:a7:
cf:da:dd:95:31:e1:f0:53:1b:20:57:73:3d:a2:2c:
c3:ba:04:ae:9c:03:71:c5:94:f2:49:72:54:c7:b9:
b1:45:c4:50:b1:e3:2b:db:fd:0b:1e:f7:cb:2e:d6:
4c:60:0d:10:66:b9:33:c6:44:59:3e:74:77:97:35:
f6:c4:7a:88:f4:a8:ac:0d:c9:55:ec:6b:7d:ba:f1:
39:86:a9:c0:7d:d5:a5:38:65:a2:9c:da:0c:e9:48:
80:37:b4:b7:21:c1:37:45:ec:6d:2c:00:e6:b7:34:
d8:8e:29:80:16:23:db:d2:f2:e1:9f:4f:a6:0b:57:
3e:f9:8c:6a:39:98:3a:6d:2d:b6:6e:3f:9d:8b:e4:
8d:2b:64:b4:5c:10:06:7a:44:59:c7:ae:2d:8a:15:
8f:70:46:47:d3:d6:f1:06:d2:c2:46:17:63:1d:29:
8d:da:5c:5e:f6:9a:76:f9:e8:40:e0:9a:ae:ee:9c:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.68.0-194.48.83.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29143
Signature Algorithm: sha256WithRSAEncryption
1f:a7:9c:70:35:95:78:d1:f6:75:3b:73:de:3a:dc:58:5a:a7:
5f:47:04:63:81:27:61:1c:76:6d:21:6d:68:97:66:c6:72:c9:
0b:e9:39:4a:14:19:d2:3d:0b:fc:34:bb:81:7e:87:0a:b5:b0:
53:48:86:61:b6:34:ef:04:9a:8c:6d:9e:88:bc:33:98:42:75:
d0:3f:52:e4:ac:15:91:cc:5c:98:45:40:49:05:09:8f:45:bb:
55:b4:e4:5c:79:4d:9a:08:7a:e5:45:c5:1e:7a:af:d1:da:33:
75:05:c0:09:de:9c:15:3e:2b:18:87:e9:5a:65:6b:6b:7d:4e:
32:c5:a2:90:ca:ff:b9:f9:dd:57:ed:35:cc:b3:e4:7c:b1:ba:
8f:6e:1a:d5:d2:24:9c:b7:b0:16:84:2a:ad:24:66:78:6e:cd:
5f:7f:68:3d:f2:27:27:92:0f:6c:11:b8:c0:6f:ab:1c:bb:63:
80:b1:4e:a1:14:91:55:62:83:e3:74:e0:0b:58:33:bf:8d:a5:
5d:ca:2e:3a:7a:88:d7:6c:48:14:41:4d:e8:2f:61:05:ef:44:
f8:e7:bb:64:69:58:7a:7f:d4:25:7d:0b:a1:43:f1:f0:01:4f:
af:f0:4c:d7:ce:87:20:bf:c2:ab:35:4e:f7:81:9e:bd:5d:b4:
b5:f2:aa:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:04 2025 by rpki-client