Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer (raw, json)
Hash identifier: uSCV3he8eZHE1h9WUIg1hgtonKKgSc2i3WWENz4nHA8=
Subject key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424458EFD7C24A237F30A6D4BC17E2947
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200096
IP: 2001:678:7c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:fd:7c:24:a2:37:f3:0a:6d:4b:c1:7e:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4c9f067007684facca9be8ce02da4676c09972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:21:71:18:a9:72:74:6c:3d:fa:1d:f8:41:
08:b7:0a:f8:1b:ae:b9:6d:85:2d:4c:e2:e9:57:df:
d7:66:2d:79:41:a6:5c:8f:dd:4e:6b:35:99:bf:bb:
9e:38:b7:ea:98:fa:51:31:8f:69:4d:5d:4e:be:47:
53:49:38:ce:ea:d2:ad:34:60:67:fc:7f:5c:eb:ac:
3d:f4:a7:f1:51:f2:3c:a5:cf:a3:a0:1c:0c:ef:d6:
65:4b:cf:26:19:d9:9a:14:a1:11:b5:ee:11:0d:d5:
b7:6e:16:66:a7:98:bb:09:db:39:95:d8:eb:14:49:
bf:b1:81:35:a7:88:57:80:89:69:91:8f:fe:70:59:
28:6e:c1:c1:69:6f:d8:d0:4a:ff:60:2e:cb:41:9d:
05:66:65:61:0b:06:7b:1b:f0:18:c4:85:fd:3a:19:
a7:c9:0e:aa:d9:be:4c:e9:34:aa:cf:b4:93:d4:09:
ec:14:c9:92:27:f3:bd:62:f0:bf:3b:bb:78:bc:b2:
18:2a:d8:55:e7:5c:2a:41:ff:f9:47:a2:e7:5c:74:
97:7e:a3:39:5e:56:a0:c3:e8:f9:39:27:f7:83:1d:
ce:0e:1a:5e:38:fe:ce:51:85:46:b1:d7:d2:de:0a:
ac:9f:dd:ce:b9:45:5e:a4:26:32:26:8c:cc:1d:b6:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200096
Signature Algorithm: sha256WithRSAEncryption
b1:eb:f4:66:61:24:4d:bc:0e:38:a5:b4:0e:5c:32:4d:76:96:
85:e5:af:9e:90:89:c5:47:d5:f1:ac:c5:3a:69:ab:4a:a6:61:
33:1e:c6:9e:8b:99:1f:d7:38:ea:e8:af:65:6c:77:ca:2e:72:
77:e6:ba:c0:4d:3e:6d:31:ea:4d:bd:5b:ea:e2:62:13:f4:d1:
6b:f3:71:bf:99:e4:e4:df:6b:63:dc:c0:c7:c3:0b:e7:89:19:
55:58:9c:bf:ac:18:af:d8:d4:07:60:a0:89:11:d4:b3:71:e2:
50:83:05:93:5a:2b:cb:2f:dd:54:8a:4c:1a:11:4d:ef:85:24:
0b:1d:32:93:25:04:91:5f:6c:c2:2c:0f:3f:e1:af:25:df:cf:
e2:03:75:bf:2e:ca:72:3e:74:d2:6a:21:68:1e:7c:8e:c1:88:
43:9e:6b:14:74:3c:a1:3a:d6:26:28:5a:9a:11:32:96:40:92:
4c:c5:43:7e:28:3f:51:14:85:f8:2a:c1:cd:5e:3c:5f:6c:0f:
7f:51:74:8f:39:bd:ea:24:a3:01:1c:6c:bc:bf:36:66:f8:c3:
8f:6d:b3:5c:d9:3d:24:1c:ce:c7:94:4f:91:98:b9:09:bf:48:
29:24:d5:f3:9b:f3:fe:b0:ec:1e:be:24:4f:e1:31:50:9e:63:
a9:fc:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:04 2025 by rpki-client