Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.cer (raw, json)
Hash identifier: nDu/MKJLigAnBsHoKUn5CrqnbdT35+1qgbWDVUFyzF4=
Subject key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA74DBAEEED06CE2A7FE8243C5AF83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8982
AS: 34960
IP: 5.149.0.0/21
IP: 185.120.92.0/22
IP: 185.122.48.0/22
IP: 194.126.144.0/23
IP: 212.120.0.0/19
IP: 2a01:48c0::/32
IP: 2a03:2560::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:db:ae:ee:d0:6c:e2:a7:fe:82:43:c5:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:d1:10:e5:6e:62:90:d9:48:af:e1:4a:24:
f5:6b:be:da:c2:7a:f2:00:c3:d2:b4:16:45:02:c8:
2d:e7:36:7c:3a:10:bc:c3:73:47:a2:24:d5:39:c6:
49:ca:86:21:cd:28:ba:3d:e0:b0:cd:72:06:2f:d0:
68:cd:08:42:3a:f9:b4:dd:1f:0e:d3:bb:c5:bf:47:
a6:a1:51:20:a6:92:96:42:40:60:96:d5:04:d3:2d:
fb:e6:8e:35:d4:6f:f5:50:43:f5:46:7b:e2:b5:4b:
57:1c:f7:ca:a8:fe:53:5b:78:de:08:d6:9f:3b:06:
c0:9c:e4:6d:9f:ee:3d:1c:fb:69:45:d1:b9:b8:94:
61:1c:e2:4e:50:ea:e3:30:e0:95:47:a2:bc:b3:69:
84:5d:7f:bd:e5:6c:c3:53:9c:d8:cf:25:dd:15:49:
42:4f:a6:62:af:4a:f6:84:43:ac:80:fe:53:f9:23:
39:6d:89:bd:31:c6:64:af:a8:8c:1f:65:2f:6a:18:
e2:16:75:be:84:c5:21:05:b7:e4:e6:f9:2b:6e:76:
d3:a4:90:e3:2a:04:95:f8:6a:36:ad:e5:62:ac:51:
4c:02:7f:ad:67:1b:a0:d2:c7:c2:95:e9:46:b1:a5:
a9:d1:48:d1:5d:37:b3:0b:69:7f:4f:c1:95:fe:ea:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.0.0/21
185.120.92.0/22
185.122.48.0/22
194.126.144.0/23
212.120.0.0/19
IPv6:
2a01:48c0::/32
2a03:2560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8982
34960
Signature Algorithm: sha256WithRSAEncryption
a6:b1:95:78:d2:52:ea:ff:f1:69:00:2e:de:72:64:85:a0:38:
c0:b7:94:f4:11:c9:20:54:15:14:25:07:db:a8:6c:e0:81:6b:
83:5e:21:e0:d0:89:34:3f:27:99:89:34:eb:3e:60:fc:5b:51:
5c:a1:f9:d7:bf:d9:52:3b:3d:66:34:77:2d:95:eb:1b:7f:37:
b6:8f:20:be:fe:33:f9:bc:b7:f8:59:87:88:8c:84:87:e9:bc:
55:c9:a0:98:85:0a:12:41:6e:a3:f8:1f:12:d9:79:cf:de:be:
fa:29:ab:97:c7:99:28:c3:03:b0:d4:1e:fc:f5:8a:d5:21:df:
ca:9c:56:34:cd:34:8c:cf:fe:c4:62:0e:3b:ae:4f:e2:b4:8f:
d1:d9:78:d4:9e:f8:8b:2d:a0:f5:cb:b9:aa:b7:e6:83:b8:32:
d1:e9:5a:02:cc:19:7a:f3:e3:e4:b4:73:a5:d1:47:32:3f:e7:
aa:cc:1b:d9:15:0b:71:94:9c:b4:a8:3f:b2:67:18:cb:75:85:
9c:f7:78:c7:8b:a4:7f:df:f7:49:45:f7:1f:ea:7e:2d:83:fe:
0c:c3:4f:05:7a:1e:bd:35:f5:e1:14:7a:0c:5e:07:1c:b5:c6:
73:86:bf:50:73:a2:b7:1f:36:c9:7b:a3:d5:db:fc:2e:fb:70:
df:a9:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:30 2025 by rpki-client