Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
File: pLTIq4O22Sp069zeiLwhlXxX8eg.cer (raw, json)
Hash identifier: abZTAE+0AQwFxMA22/rEKLA9BoTZ8kuCAgxpbBr8wh4=
Subject key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F02EBB9786312E354B7E000B5668A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209688
IP: 194.4.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:eb:b9:78:63:12:e3:54:b7:e0:00:b5:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:df:7b:67:a7:aa:d2:89:3c:b3:2d:1d:1e:
e1:06:e5:10:32:98:55:55:19:e5:52:84:3b:32:e0:
0a:70:bc:a9:70:82:be:ab:42:cb:2a:b0:81:bc:fd:
6d:93:3f:c2:5a:5a:93:73:f8:b1:05:01:09:ee:a5:
8e:97:4c:05:4d:64:46:62:c3:44:c1:d4:bb:5c:45:
7f:df:34:22:97:c4:4f:b8:1d:fe:15:5f:b5:b5:ba:
63:5d:6e:89:00:32:d8:6e:85:11:c1:54:4d:dd:3e:
76:b4:75:c2:bf:e1:0d:c6:aa:9e:69:1b:7c:31:06:
07:43:59:32:11:a0:04:ea:99:65:18:16:71:b8:2a:
d5:47:80:86:4d:59:a4:b3:91:e8:fe:d7:80:7d:c5:
ef:10:2f:60:ae:e7:84:b3:90:a7:43:93:e2:fc:67:
35:bb:f5:4f:0f:f1:06:4d:0e:12:61:16:b0:01:89:
01:26:86:51:e7:fd:b9:69:d6:f0:3b:7a:12:14:b9:
d1:03:d4:bc:34:af:db:55:0b:4f:de:4f:09:26:7d:
90:26:7b:78:eb:16:4d:66:d7:7f:27:26:02:e4:29:
fb:b8:85:6d:c0:26:09:16:9c:4b:e1:49:d1:e5:e9:
b5:10:a3:28:ed:d5:f7:c7:e1:cb:ce:8f:77:e7:a0:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209688
Signature Algorithm: sha256WithRSAEncryption
66:96:24:58:d4:58:69:46:11:3d:43:9b:94:4d:a8:c1:16:70:
9e:77:c9:24:db:ec:0e:d6:6d:10:67:b0:d0:84:5f:81:ec:60:
36:28:e4:b1:5a:91:b2:06:c9:54:b4:08:87:04:9a:e1:a5:de:
f0:8f:46:77:1e:54:13:b8:e6:3e:11:40:d8:42:94:37:8e:21:
87:b3:57:fa:af:50:94:5a:c8:87:95:8a:47:07:25:f9:1d:0b:
6c:36:07:65:3f:53:c0:16:84:28:15:9b:16:19:2c:e9:40:80:
00:d0:a2:ba:2c:a3:9d:b8:f6:26:1b:75:6e:ff:56:46:84:27:
c5:34:41:b5:6c:35:3a:e2:d9:85:fc:00:3c:6f:c6:eb:98:cb:
b6:a3:43:c0:7c:6c:e3:d9:e2:6b:5f:1e:a1:22:fe:64:fd:6a:
75:70:9f:ef:1d:21:f0:f0:13:a7:66:c7:ea:78:a1:d7:77:13:
c8:32:4c:97:8a:f8:fc:92:21:6d:55:51:85:9b:5d:ae:43:9b:
fe:7b:bf:c4:96:9c:9a:98:9a:e9:8c:80:a3:7f:04:80:98:6f:
2a:47:cd:33:3f:ec:d1:ff:34:36:8c:04:4f:16:26:4e:6a:ef:
ea:7a:69:5f:54:4e:41:80:d3:13:8e:f6:cb:b5:9b:ef:d5:23:
9b:c5:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:29 2025 by rpki-client