Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
File: p_555OY70WvEI3WStoTQBDPL0PY.cer (raw, json)
Hash identifier: 5zgEKTtTCj9q3HG7RcgVFI8CrHXPUgfYPc5gGz36v8k=
Subject key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA5C0F1A6243DC051093564E59A86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44577
IP: 91.230.124.0/23
IP: 185.150.104.0/22
IP: 2a07:7080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:c0:f1:a6:24:3d:c0:51:09:35:64:e5:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:3a:9a:07:3f:e3:fd:01:5d:0e:05:1b:49:
14:13:ee:53:f0:b1:8a:9b:7f:76:4a:67:7d:ca:80:
0d:cb:b6:49:71:b5:d0:c9:10:eb:93:e6:2f:c3:28:
7b:32:a9:5d:49:74:0d:32:c1:d6:f6:73:fb:00:ab:
95:1e:79:c2:84:e2:a7:31:73:87:bf:eb:60:3e:f2:
ea:a1:d4:39:4c:ba:26:28:5b:75:1f:2e:17:b6:65:
4d:2b:3b:c8:1c:6a:07:f7:b1:e7:09:95:b7:af:9f:
5d:4c:e1:6b:9c:bc:a4:3f:54:24:f3:28:c5:61:77:
dd:20:37:ad:80:7d:29:96:7f:b5:46:b0:b0:37:fa:
5c:5a:0e:d7:db:35:7f:83:6a:8f:27:7c:63:3a:23:
09:36:d0:d2:de:51:9c:ee:ad:a6:c8:fb:e0:3c:0b:
98:67:e1:e3:66:39:50:b7:6a:86:9f:b0:d4:af:34:
6f:78:20:4e:0c:18:49:99:14:23:58:70:03:21:ca:
b3:90:46:aa:52:0c:05:15:79:58:b0:0f:50:af:85:
17:22:ab:79:9b:3a:f6:56:f3:31:d5:b6:aa:61:b1:
a6:0e:a4:82:dd:72:8b:94:69:8b:6d:a3:36:d4:3e:
53:33:d4:c6:f8:a2:b6:2e:dc:69:b3:b4:f9:3c:c0:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.124.0/23
185.150.104.0/22
IPv6:
2a07:7080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44577
Signature Algorithm: sha256WithRSAEncryption
37:18:d1:00:21:82:47:34:bc:fe:d0:60:8e:73:b8:d2:a2:f0:
af:ff:2d:d0:c1:82:b8:2a:4c:ef:df:e5:6d:83:1b:4b:b6:4e:
cd:a2:65:ba:a3:0e:38:52:4a:41:58:66:8e:16:f9:55:c8:79:
cb:42:ee:8f:8e:cb:c4:d8:30:09:c9:53:40:c6:c6:13:87:33:
d7:43:6f:8b:00:91:48:a8:88:00:1a:b7:b3:bf:29:0b:6b:df:
ae:09:1b:53:49:a6:02:a0:b5:2e:cd:6d:ff:44:34:f5:0b:82:
c8:f1:2b:13:00:92:0b:42:32:b6:84:01:35:96:92:33:2b:57:
ed:ca:da:af:9b:bf:cb:8a:30:5c:b8:90:af:79:66:4c:8c:f6:
2b:57:a7:e8:28:f1:a0:f6:17:8e:c0:64:6b:b6:11:86:9c:eb:
7e:43:07:ae:8f:29:4d:38:69:ec:0c:17:f1:a4:2b:f3:8b:c8:
9a:26:25:bf:3e:2d:5e:27:6c:41:3d:e9:52:ba:22:41:a8:51:
35:5e:05:a8:05:5d:96:ab:f8:8d:ff:5d:14:56:6b:92:09:1f:
70:96:fc:b4:9d:68:90:55:be:c8:e1:f5:7c:06:61:bb:96:33:
ac:27:f0:a5:4b:02:3b:e8:a9:f0:94:00:cd:b5:0f:0f:9f:94:
21:35:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:54 2025 by rpki-client