Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.cer (raw, json)
Hash identifier: M8R/GKM43mS9DgHq8NtuVNtW7NS05Fky5vXldw7E/Gg=
Subject key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5E0C709CF61ACA0AEB39CE93A95A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44486
IP: 45.88.108.0/22
IP: 45.135.200.0/22
IP: 91.218.64.0/22
IP: 2a04:e8c0::/29
IP: 2a0c:75c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e0:c7:09:cf:61:ac:a0:ae:b3:9c:e9:3a:95:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:8a:e9:9e:f7:92:83:1c:44:ae:74:81:7c:
2a:85:98:2a:ab:10:6b:9a:c7:54:ce:80:38:da:69:
82:17:c2:28:e7:f5:40:8f:83:54:34:7f:a7:75:be:
ef:57:4d:12:cd:69:16:98:ec:f0:84:c6:7d:6b:04:
20:d7:15:5e:21:cd:7f:b9:c8:84:47:b8:a1:e5:58:
bc:99:32:48:24:81:a9:ca:9f:8b:2e:2c:a0:1a:77:
85:08:55:65:97:55:93:af:4f:c1:f8:95:19:c1:ca:
3c:f7:e2:a5:0d:c6:24:e6:f2:d0:8d:ae:78:7e:66:
e4:32:88:31:24:1b:d0:10:da:4d:57:b0:db:34:33:
77:d1:82:e2:cc:95:1c:5f:6a:61:9b:a6:7a:d5:79:
1f:4e:a3:4d:b1:5a:0b:52:50:4e:ea:b0:6d:62:42:
73:47:75:54:ea:7f:82:72:45:c0:a6:3a:26:e6:23:
4b:32:9c:12:a4:8a:2d:92:a2:c7:98:8c:8f:22:e4:
41:c7:62:8b:c3:15:fe:16:cc:f4:45:b9:e5:bf:ad:
62:59:d4:ab:ba:3d:71:09:f8:a4:71:b3:32:b2:d8:
3d:70:b2:cc:52:0e:db:c1:ba:dc:93:70:13:40:ed:
23:58:43:7d:cc:17:b7:42:d1:f4:d7:c5:ef:16:74:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.108.0/22
45.135.200.0/22
91.218.64.0/22
IPv6:
2a04:e8c0::/29
2a0c:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44486
Signature Algorithm: sha256WithRSAEncryption
02:33:b4:6c:cb:ad:45:5d:86:df:38:1d:0b:dc:d5:c5:cb:04:
79:b1:6e:0a:a9:24:55:28:6d:29:b1:75:f4:73:08:fe:e1:43:
23:04:2b:d4:a9:3e:a3:6d:4b:12:ba:4c:7b:6f:f5:93:bf:6a:
a0:6c:e9:63:1a:c1:a1:12:08:7e:b4:76:a2:18:6e:5c:49:6d:
30:36:22:be:22:a3:28:dd:09:76:d1:d6:a6:b8:8a:1e:59:92:
11:7c:fd:22:22:14:05:bf:60:da:7e:ae:ca:d5:61:b4:b7:13:
9e:d2:39:86:cc:83:32:3d:c2:8b:ed:f2:64:1b:7d:7f:93:76:
c7:2b:1f:55:df:e1:8c:f3:3c:21:26:cc:b9:6d:bb:84:3f:93:
17:1e:f0:51:58:f2:3e:ec:47:8c:44:46:8c:38:86:ed:45:73:
64:7f:84:48:6b:51:bd:46:17:14:01:2f:b4:1d:9a:94:e4:06:
11:7f:6e:b1:35:ba:7c:27:b1:f9:47:93:19:0d:ee:96:90:09:
04:c2:3b:00:f3:19:55:a6:2a:96:d4:ab:cf:bf:71:da:1c:b4:
9b:7f:d3:76:2b:48:a5:96:65:28:96:14:48:63:6d:70:41:80:
d3:11:60:85:dd:4a:cb:d5:14:08:6e:da:18:9a:44:3a:88:cb:
d7:40:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:20 2025 by rpki-client