Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
File: n68L-T_EOB__fnqoa0B2wDMkL_o.cer (raw, json)
Hash identifier: gHuEb3FspTZ4xBTFSd6bIqOiS7Dv5Me26CUy8CErdno=
Subject key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BDFD93D28978F1BAE5CC0951F9525
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44712
IP: 151.249.104.0/21
IP: 185.91.204.0/22
IP: 2a01:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:d9:3d:28:97:8f:1b:ae:5c:c0:95:1f:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:fb:e6:bd:5d:1a:d0:5a:31:f1:40:7b:0b:
c1:eb:52:27:a4:a4:da:e6:3a:56:b4:be:bf:c9:36:
ee:d0:14:db:72:34:a0:5a:0e:8d:73:e2:70:75:4e:
63:b9:b2:c8:54:5b:87:82:89:95:bb:03:66:ab:50:
a1:70:d2:f6:81:9d:b4:8c:44:e9:17:fc:c4:4d:d9:
07:4a:cd:1f:09:86:d6:b3:64:20:7c:44:e6:aa:4b:
ae:ce:06:94:48:5e:5a:a5:52:3e:32:ce:29:99:9e:
66:70:c9:9d:d3:02:86:e2:88:26:20:dd:9e:00:ed:
c9:67:0b:3e:3e:d6:a1:21:e0:5a:a1:b3:07:bb:b9:
e7:7b:dc:11:bb:ab:9e:6d:9c:b9:a0:29:02:a3:33:
3c:17:0a:be:06:16:8e:71:42:26:8b:50:8f:c3:0e:
a6:ae:b2:68:08:99:91:40:06:60:5f:07:74:1f:79:
2b:cd:14:da:2c:24:17:f8:dc:89:74:2f:63:c0:52:
9f:d2:99:e8:8f:65:85:b0:82:c6:a9:38:25:da:aa:
b7:b7:0d:68:a4:bb:f5:20:4a:f3:b2:07:9e:85:3a:
f6:cf:7c:32:9b:e1:fa:37:c2:ae:13:18:6b:29:d9:
50:e5:71:4b:0f:9d:c2:2d:c4:17:ad:17:cb:db:fa:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.104.0/21
185.91.204.0/22
IPv6:
2a01:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44712
Signature Algorithm: sha256WithRSAEncryption
39:1a:f2:ea:35:01:e5:1d:15:a5:a1:0c:a0:68:64:a1:c3:01:
1b:75:7b:b9:6f:bd:d2:9d:d2:48:5b:04:f8:ea:75:1e:0a:6e:
6e:a1:be:14:63:30:db:77:7c:7e:60:64:0c:da:92:8b:d8:ad:
d8:0f:29:f9:81:d0:3b:0f:f5:11:5b:30:b0:b4:0a:9b:ce:9e:
7c:79:de:1d:54:1f:26:86:c1:6d:be:43:e0:b3:e1:fc:dc:c3:
05:df:3d:f3:8f:df:7f:c9:46:f5:cb:4b:17:13:13:b9:2a:8c:
34:45:b6:05:c6:9b:af:7a:31:87:fb:e2:ce:7d:72:f6:fb:75:
0b:5b:ed:91:26:b0:d3:9e:e3:2a:4a:04:97:3a:29:d9:4f:94:
ce:80:f5:e4:f4:b8:56:0a:91:f0:45:6e:71:7f:6b:4c:9c:7e:
05:f4:fc:d7:dc:72:d0:0e:4d:25:cc:e2:0e:41:7c:f5:fc:89:
70:dc:de:46:15:df:a4:85:6c:c0:dd:0a:07:1c:ec:cc:d6:a9:
b0:cc:de:5a:7f:06:b1:04:ed:9e:5c:36:9c:80:2e:a7:8d:3f:
99:26:a0:48:57:29:df:0f:16:0c:9f:58:33:be:ae:87:bc:40:
58:63:94:44:da:81:c1:c9:92:62:10:d7:36:3c:20:7c:c7:b4:
ff:f7:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:45 2025 by rpki-client