Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.cer (raw, json)
Hash identifier: y1XOmyVaFVE0XdxPob21DE5QH5ONNxAyOr+r43ky3Rc=
Subject key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BB6FAFC32B68FDA0762FDA726D876
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197892
IP: 94.154.96.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:fa:fc:32:b6:8f:da:07:62:fd:a7:26:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:77:73:83:64:95:e1:19:7b:eb:d4:6a:9e:
39:14:1f:40:25:88:f8:df:3b:41:0f:a0:29:e9:dd:
f7:5b:61:1c:72:d9:47:a4:4a:ec:c0:bb:b6:61:bd:
29:63:2a:23:e3:fd:76:dc:00:83:ee:5a:1b:5b:d4:
55:dc:eb:b4:97:55:7d:db:e5:c1:a8:45:1d:62:76:
01:bc:d6:5c:d5:44:ce:aa:9d:0c:c8:98:9c:64:6e:
d6:7f:b7:82:33:91:dc:32:4f:0c:eb:05:d6:26:41:
05:ab:a2:b9:6d:10:1b:2a:10:24:3c:8a:35:34:78:
a1:32:0c:b2:af:10:13:ef:f4:e9:cc:a0:fd:f8:2f:
49:5f:26:3f:d6:1d:5a:f0:3f:cf:cb:70:42:18:73:
bd:ed:b7:1b:29:47:61:35:e4:53:80:5e:48:42:0f:
12:2c:69:65:31:32:ad:1e:45:64:31:b4:1b:21:05:
23:8e:f2:9b:59:cc:dd:df:49:26:5c:39:5d:a7:ed:
dd:19:c3:35:f4:a7:83:5d:f4:92:64:98:8c:3c:dc:
e4:5d:ba:06:42:d6:f4:2e:5f:53:10:12:ab:5b:2d:
5d:32:30:19:aa:2a:78:0d:14:dd:84:a5:29:41:97:
41:99:1b:8b:ae:7d:ea:90:c5:60:66:c3:8a:b2:0b:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.96.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197892
Signature Algorithm: sha256WithRSAEncryption
88:51:aa:95:4e:b1:66:0f:e6:45:4b:37:5a:58:b0:17:a4:60:
81:07:24:80:2e:04:49:90:9d:28:5a:b9:ee:77:8d:5c:79:54:
fa:f4:be:8f:28:2d:8d:db:b0:29:c5:20:b2:16:08:72:c8:1e:
96:8a:4c:94:54:df:7a:10:23:76:6c:a9:8d:36:20:49:1c:ed:
6c:2a:84:f5:5a:1e:f1:e3:62:ca:f8:17:08:3c:a7:e6:64:20:
29:ee:f2:cf:ea:de:32:7a:57:c9:d9:6f:47:2c:85:c4:81:03:
2f:ab:99:01:08:8a:2e:6f:14:84:99:26:ba:36:b7:98:4f:59:
90:2f:db:ed:c2:6d:4e:c2:cc:e8:00:82:16:5e:1b:bb:20:e3:
7e:3b:5b:67:2b:58:33:5a:a7:85:9c:68:b7:ee:b8:7b:b2:17:
3a:f8:05:84:96:ac:4d:73:65:7e:3c:d0:33:de:07:2a:17:1b:
11:42:5f:98:8c:4e:16:a1:dc:60:f1:c0:4a:c5:d4:f6:b0:f9:
05:0c:74:5f:f9:b5:fc:a4:5f:72:70:9f:e5:29:6e:17:f8:19:
86:5c:e6:36:a5:2a:a3:df:05:8a:1c:9e:29:fe:e3:d1:35:8f:
72:b5:37:97:49:77:ca:fa:f9:3c:d4:a8:7e:2c:08:10:87:09:
44:ab:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:17 2025 by rpki-client