Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
File: qKp6dXaxsilZDAkP01bDgt_zFbc.cer (raw, json)
Hash identifier: eWmLzDVz8QlI+Jo2qJPKH/+XCXqS8/xwz4Uq7TD6iBo=
Subject key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B216E20CE1899726173266C00F69FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208072
IP: 91.221.240.0/23
IP: 91.224.20.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:e2:0c:e1:89:97:26:17:32:66:c0:0f:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:83:79:5d:90:bc:6c:75:1d:92:69:cc:a2:
85:d8:f2:79:9e:98:6a:0e:30:20:7d:e3:d3:28:b8:
0d:0c:58:55:d9:1f:54:cb:39:86:ba:11:07:a8:5e:
88:15:15:f3:7b:70:fc:ad:80:55:65:f6:5c:5e:58:
a3:9d:98:8d:ad:78:e4:7f:c5:d2:84:82:0a:9a:09:
7f:71:84:1c:4e:34:cb:d5:e2:47:a6:e5:e7:69:97:
03:38:c1:fb:77:d7:96:8d:54:24:00:4f:92:3f:82:
66:79:a9:83:68:ca:c5:bc:bf:b5:1c:b3:38:8c:a6:
02:c0:81:a5:f1:65:d7:4c:0a:40:77:3c:b4:32:6c:
a5:1a:ce:1f:0c:c7:05:0c:26:74:5e:21:a1:cc:1d:
d3:ee:2d:1c:af:8e:b1:c7:5d:0f:17:28:8b:b6:c1:
0e:15:89:ba:ed:3e:1c:38:2d:51:96:cf:38:04:30:
9c:ab:6d:73:c9:a9:07:57:91:6c:00:81:f8:22:6d:
bd:1f:25:98:41:19:3f:fb:7a:9f:50:60:1f:9b:61:
6b:c7:cd:48:1f:e4:ec:5b:17:74:21:d6:ca:cb:56:
16:a1:ed:c1:29:de:b7:ce:1d:1c:3b:5e:48:44:e5:
65:9f:2d:3c:7b:ea:e7:b8:52:54:c4:3c:04:97:b2:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.240.0/23
91.224.20.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208072
Signature Algorithm: sha256WithRSAEncryption
61:e3:63:97:5c:75:c8:96:3f:81:0e:08:52:79:43:a1:c9:bd:
ce:f0:53:f1:d5:f7:4d:c1:1b:b6:7f:9e:a8:d9:e2:4a:8b:da:
b6:1e:b1:0a:a9:c7:d4:ef:f1:16:4e:4c:27:37:1f:8a:04:a8:
49:38:b1:6a:4a:36:3d:15:da:95:77:0e:0b:cc:28:7f:c8:30:
f6:96:fe:ad:d3:0d:53:c4:47:21:d5:ec:c2:0d:cc:c0:81:25:
15:6f:d3:a9:04:8f:ec:46:f3:99:77:0c:6f:6f:2a:e0:18:34:
59:8f:d2:d6:60:c6:65:9c:52:6e:8c:0f:19:66:0a:e1:73:fa:
f9:4a:bf:ee:35:81:17:b0:d8:38:ef:89:70:a1:74:aa:a9:08:
ec:d8:3a:13:66:66:95:f6:7a:d6:46:12:01:51:70:15:d2:60:
40:a0:8b:fc:88:29:60:3d:84:f0:27:95:8c:55:bf:8b:3f:17:
5c:17:ce:0e:e9:ed:4a:ca:6b:36:75:b8:b3:47:a2:fb:f5:ae:
3d:ec:2a:8d:3e:c8:f9:aa:0e:8f:16:b2:35:f9:c3:3e:e0:27:
d7:d5:b2:81:be:38:9b:f4:28:30:26:ca:01:cd:db:db:c2:98:
69:f2:14:6a:b3:48:5c:13:56:c4:f8:8f:04:2d:55:ab:69:35:
2a:42:75:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:06 2025 by rpki-client