Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
File: q22oNLMssSxL2uM_Zy80jZg_MXY.cer (raw, json)
Hash identifier: SZIJfs+xauBY7owD6+h4iK+bC1U6+JRF07PCnOZm6VE=
Subject key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7D3E47B1E6DA004DE9F646026C75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28967
IP: 195.39.224.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:3e:47:b1:e6:da:00:4d:e9:f6:46:02:6c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:b5:84:68:43:af:80:95:ca:e3:88:fb:7f:
8f:2a:63:c2:1e:ea:17:3d:db:e3:13:4a:02:d3:fe:
8d:0b:ae:49:01:de:a8:49:7f:f9:19:de:cc:5a:83:
10:86:6c:94:47:f7:77:af:81:73:2d:a0:c9:d9:20:
f3:64:2a:96:f7:0d:4e:6d:fe:a8:34:a9:c1:c1:b6:
6e:a8:74:fd:df:44:aa:97:2b:95:5f:09:86:7f:3a:
56:c4:b7:7a:c7:de:6d:06:82:65:1e:27:24:39:b1:
07:59:2f:48:a4:d5:cd:09:6e:57:4d:0a:48:e5:28:
2d:65:60:66:65:95:d6:be:03:43:68:bc:7c:c8:77:
62:de:9e:75:b3:ee:b8:06:a4:da:42:a2:c5:44:f5:
b8:d1:a9:d8:9a:9b:08:82:87:37:9d:73:01:f1:9b:
e5:37:5c:da:f2:33:0d:0b:a3:74:4e:54:23:85:b2:
10:13:6d:d3:d4:9a:e4:4c:5a:5f:46:85:44:7f:5e:
c1:53:b0:d2:04:75:6e:f4:5d:f0:66:6a:45:d2:b9:
28:bd:4e:d7:16:d8:42:e8:28:86:3f:34:09:2b:28:
4d:89:96:6e:23:93:1a:1c:a7:7e:e3:f0:74:3f:4b:
67:e6:dd:d8:9a:59:e9:a3:15:93:2e:45:9d:4b:e2:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.224.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28967
Signature Algorithm: sha256WithRSAEncryption
1e:c5:91:35:5e:4a:85:ca:19:1b:07:28:1e:39:28:3c:e9:75:
fe:95:07:57:8f:b7:3b:09:ca:e4:d8:b9:50:1f:bb:af:d7:dc:
78:65:4e:da:a9:11:80:ed:49:01:ae:0c:07:eb:d7:95:70:02:
1c:c7:14:2a:95:8a:ac:7b:28:31:71:a2:04:41:63:1c:a8:ea:
2a:47:3d:23:61:fd:a9:84:69:47:05:1a:dc:1b:be:15:7a:0f:
28:ed:2c:2f:10:22:a8:bf:09:43:a7:ea:cd:53:f2:86:3e:2d:
08:76:f9:4d:7d:ea:0f:74:be:ca:1f:a5:b0:92:ee:7b:4d:08:
80:22:e5:0a:e5:e8:f9:c4:69:8d:88:dc:a1:55:77:6e:f0:49:
b3:99:b6:fb:11:99:4d:9a:21:3f:87:0b:df:b4:8d:0a:1b:ac:
98:e8:1e:fb:fa:58:b8:df:40:cf:4d:2a:ed:b0:e8:d1:f0:9e:
51:7b:3b:56:31:d4:d0:83:75:30:4c:81:80:f6:f7:30:d4:19:
46:73:90:d9:54:fa:46:4e:6b:cc:ac:2d:eb:db:e6:88:f6:09:
a6:bf:ea:87:11:e0:6e:de:86:fb:9e:d4:19:68:18:36:ad:10:
9d:e3:22:fd:24:5e:67:f0:d3:c2:a7:a3:26:21:85:b5:56:13:
9b:58:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:59:52 2025 by rpki-client