Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
File: nUxyfODk4Wasa-ME__JRgW1RpEI.cer (raw, json)
Hash identifier: SaJFnA23OmURAeoBtVipWSJPdBIJr6k8pESk5aRUfz4=
Subject key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8A892916A2B957237195A2DE0E61F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29160
IP: 80.74.80.0/20
IP: 88.81.0.0/19
IP: 188.139.0.0/17
IP: 217.8.64.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a8:92:91:6a:2b:95:72:37:19:5a:2d:e0:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:d7:f3:45:d8:1e:2f:64:00:df:25:41:bc:
b2:e6:eb:36:9a:75:7c:5d:af:ab:1a:bc:75:f2:13:
e0:5c:77:a7:67:d7:c2:6a:7f:db:b6:27:c9:6a:c6:
da:d7:67:70:2a:54:9b:44:08:f9:c8:6e:54:3a:a3:
e3:4a:e3:6e:94:83:e9:e6:8f:d2:ee:f2:b7:93:e8:
b4:53:6a:98:7b:25:35:61:09:ee:05:d6:d7:8d:1f:
c7:c5:1b:ba:30:44:72:ba:23:5f:f3:af:c7:33:3f:
9d:48:86:05:f5:e3:ca:66:d2:ca:48:1b:fa:99:56:
91:ce:f8:ea:8e:2b:89:2e:07:14:ac:d6:58:b5:d3:
61:cd:e1:ca:fa:20:6e:53:ca:fa:4f:b7:7f:b0:35:
a8:8f:00:5f:79:e8:3a:04:75:dc:9e:83:00:f6:3f:
d9:f7:c2:0c:2b:25:25:fe:f9:5d:6e:9a:41:44:a9:
b8:8c:de:00:0b:97:a7:ae:51:80:ce:9f:4c:e6:a5:
3b:91:1f:4c:4a:40:c6:92:bd:dd:2d:7a:be:1a:9e:
43:3c:c8:69:dd:e7:74:90:35:32:a5:8d:d8:10:3b:
6e:d7:3d:aa:55:73:33:cb:9c:77:1f:13:7f:80:90:
24:e7:07:37:e2:04:7e:90:98:15:9d:5d:b8:1b:f2:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.80.0/20
88.81.0.0/19
188.139.0.0/17
217.8.64.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29160
Signature Algorithm: sha256WithRSAEncryption
4c:8b:94:43:9e:cf:2e:5c:18:1f:c9:de:6c:35:35:67:43:c3:
a5:7a:1a:0a:e5:2e:5c:ef:9f:ae:32:2b:0e:40:52:57:84:61:
05:20:38:42:6e:39:20:ac:79:25:2e:b6:03:fa:1f:9b:7b:c4:
72:8e:d3:51:39:47:0f:c2:fb:eb:c8:33:67:6a:01:89:47:18:
79:da:b6:da:0e:c7:dd:2c:ca:15:09:fd:18:c3:05:11:10:ef:
47:23:5b:2f:af:42:6d:f3:ad:9c:b5:4c:28:01:e3:65:b8:d9:
7a:9c:68:4a:0b:ac:41:91:27:34:8f:be:23:5b:22:ed:e6:6b:
82:b1:f9:ed:58:b7:52:83:2a:39:ec:0f:ac:57:0a:6a:23:a5:
c6:6b:0c:2a:3d:1a:ff:07:2f:b2:9f:e8:62:d0:00:31:44:fb:
bc:57:8e:c0:18:23:65:43:76:e3:f4:e9:b2:3a:db:8d:f0:8f:
d3:32:20:47:b3:02:fe:a9:9b:43:d8:59:ab:85:17:39:dc:30:
a5:73:75:f9:02:24:c5:99:07:4d:48:f9:60:77:d6:17:e5:2e:
16:a1:f3:af:03:b4:59:c2:f8:e8:b4:81:c0:59:c8:d1:a2:b9:
e9:74:ae:b6:bd:9c:4f:83:20:0f:ba:5d:b6:91:76:2b:7e:b9:
a4:55:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:53 2025 by rpki-client