Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
File: q5udbmrCgujBAADMPbxK3z_gH-I.cer (raw, json)
Hash identifier: 4b9CT0zxPjF1442OtpV9UxprAAix5SBiBhuaGKjwRGc=
Subject key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2CA7478537C967FB8B880DB227E0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207278
IP: 2001:678:cd0::/48
IP: 2001:678:cd4::/48
IP: 2001:678:cd8::/48
IP: 2001:67c:15c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ca:74:78:53:7c:96:7f:b8:b8:80:db:22:7e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:5a:3a:ea:c0:e9:03:22:7d:c4:03:99:65:
ea:27:fd:c3:fc:40:c6:fc:ef:a0:aa:43:57:f4:f3:
81:4c:5f:13:f0:ca:e9:9f:19:a2:05:60:d0:75:c9:
c2:8f:1a:a1:ea:ec:47:26:12:3e:5d:e3:e1:c9:4f:
27:e9:dc:3f:70:e0:2d:92:0d:ce:fe:24:04:1e:88:
a1:42:21:ba:86:f1:e5:d1:69:13:de:a8:5d:c2:1e:
ff:f5:f0:4c:a0:7b:0f:4b:55:b3:f4:32:10:3d:8d:
fe:a9:d9:d2:77:a3:b8:d7:e0:25:9a:69:43:b2:07:
9f:f5:34:cf:d3:32:87:ef:c4:f4:76:db:9c:4d:79:
32:0b:e7:bd:ec:64:4b:39:40:86:f6:6d:fa:4e:e7:
b3:b5:28:24:55:bf:d7:99:40:21:47:2e:bc:46:54:
c8:3d:9d:18:e9:65:d6:30:1c:de:71:f5:e3:a0:fb:
d0:0b:d0:09:95:a0:16:10:07:f0:36:6e:b2:c9:87:
31:55:41:69:a7:f7:f3:13:99:e4:67:7c:6c:a5:df:
21:a3:af:21:88:6a:82:00:0b:67:d4:91:16:34:0d:
de:84:87:41:53:f1:d5:7b:97:b5:94:84:77:c2:05:
b5:1a:a8:1e:19:ab:51:d3:f0:7c:28:5a:37:e0:86:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cd0::/48
2001:678:cd4::/48
2001:678:cd8::/48
2001:67c:15c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207278
Signature Algorithm: sha256WithRSAEncryption
28:83:95:a3:4a:ea:84:c9:42:62:d6:ad:18:36:cb:00:65:4d:
2c:eb:38:5a:1b:b6:54:23:51:91:f3:72:e1:94:34:ac:09:5b:
d4:88:3f:69:56:76:43:42:89:1f:50:b9:52:26:85:e0:d0:4d:
96:c0:2d:ed:9f:ca:93:00:73:7a:9d:98:13:1d:d3:7f:ec:91:
b0:c1:be:55:78:e8:31:0e:24:6b:4a:b4:1e:8a:8e:75:84:f4:
c4:87:05:b5:c7:d6:48:62:9a:88:3f:03:ae:f2:ca:06:f6:e8:
9a:84:20:73:46:5f:ce:7c:c5:52:2e:37:29:69:99:29:75:50:
5d:82:b9:53:b8:ec:af:95:d7:53:3c:1a:da:27:2b:ac:0f:9d:
a0:91:e4:ba:c1:46:f4:0e:3b:d6:3a:4a:eb:82:59:61:65:24:
ae:6c:3e:b5:a6:c7:47:88:11:9f:b9:44:89:ac:2d:04:59:55:
11:ab:e2:9f:d3:03:99:17:7b:ea:5a:e5:ad:f7:8a:33:0a:c0:
53:e7:4a:c9:1d:12:cf:46:6d:63:6f:5c:42:61:39:8e:1c:2d:
e7:0f:44:24:72:69:9e:d6:c3:51:3d:52:cd:0c:88:3c:5d:52:
74:e4:a9:d6:63:56:1e:c2:c9:e7:6a:f6:56:21:09:c4:5c:d3:
dc:f3:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:03 2025 by rpki-client