Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
File: mrL5l1qR5xN52hAOyEvUSgooDZs.cer (raw, json)
Hash identifier: 8FlU4GxI+LzlCOsasWl3nDBWoJfWMjIcNxSPCSfZVc8=
Subject key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8C77B36FD0EC4072F0DC1E9B880A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43510
IP: 109.239.0.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c7:7b:36:fd:0e:c4:07:2f:0d:c1:e9:b8:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:70:ba:7b:81:8c:03:f9:c4:7c:b2:e9:6a:
88:3d:30:94:ad:69:88:46:7a:25:5f:cc:40:23:f7:
ee:b2:7d:ac:e9:b5:46:cc:83:dc:3c:91:d7:e4:5f:
98:c0:2c:47:d7:23:e2:d7:b7:26:a3:b0:1b:ef:d3:
19:5c:f1:d1:b8:b7:2d:e7:f8:44:b3:e8:d8:ef:ae:
e7:fd:c6:ce:1a:44:c0:2a:3e:5d:0a:69:c4:61:cb:
d7:20:27:76:1b:0d:f5:b6:1d:0e:02:20:24:89:7c:
58:85:df:70:1d:06:48:27:87:8a:ff:a3:a4:20:6c:
fd:a1:a3:26:6a:22:85:c3:1a:e2:a3:af:54:d4:57:
83:b9:42:5b:48:b7:e9:2f:ac:d4:85:8e:13:73:1b:
c3:b1:f2:4c:30:41:2b:64:1e:64:5b:38:2b:11:62:
d3:e7:a5:5f:ff:ee:de:8f:89:a5:2c:81:6d:39:5c:
cb:56:1c:a6:8c:2c:9e:ec:4f:b1:92:87:94:f7:3f:
e8:fc:49:53:ce:31:0d:1c:50:24:73:f3:ce:f9:6f:
d1:27:91:3c:9c:da:52:f3:bd:df:d8:db:1d:33:64:
36:47:86:bc:44:81:e2:a6:ec:44:b4:b5:00:02:4a:
f7:00:27:cc:53:fd:48:ea:5c:2e:3c:d9:06:9b:e5:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.0.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43510
Signature Algorithm: sha256WithRSAEncryption
43:c2:cc:f5:a1:eb:f4:6d:75:3d:ba:3d:b6:71:a3:4a:09:db:
38:85:29:d9:48:aa:19:01:89:e3:10:26:f7:90:fc:5f:2d:58:
60:77:db:d2:b4:75:07:bf:f4:54:b3:9f:79:e4:b5:9f:82:f0:
4a:05:f7:78:38:75:a6:84:7f:32:d8:30:02:d2:c6:62:a4:1a:
24:25:d8:53:13:63:e1:62:ca:5c:73:e3:03:cf:db:89:f5:f2:
07:9c:bd:4d:a2:b3:59:90:a6:95:ef:a1:ca:e3:4b:2f:44:59:
33:04:10:fc:8c:1c:c8:a7:ff:27:aa:7b:d9:28:b1:e3:0b:49:
67:81:93:92:5c:70:0f:92:3f:24:e6:d2:77:88:82:48:7e:12:
95:33:81:db:de:eb:90:b7:a5:07:fd:12:75:58:a6:8e:b8:f9:
8a:0f:63:25:ac:79:53:ed:78:0a:cd:81:99:7f:6d:fe:80:17:
3c:35:14:22:d6:bc:a2:19:d6:60:c5:5b:d5:bd:b8:e4:23:9b:
48:cc:0c:5d:be:9a:40:e0:c0:16:39:e2:7f:ca:b0:99:39:f3:
b3:57:b4:ca:75:0f:93:f0:c5:ee:c0:30:55:9f:4e:f6:25:6d:
c9:f5:87:a5:e0:95:d1:90:9c:5e:05:8e:15:0b:1b:f7:bc:cd:
36:ca:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:43 2025 by rpki-client