Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
File: r_RU7PyWgoYqe12-TzubDvxMV9w.cer (raw, json)
Hash identifier: eDOe1YSoy2rhk/9Pb/RZH1rnjy9ZouOZXud7wN3LdbM=
Subject key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3095C41A0B9C61C086287AD81F6D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215612
IP: 95.128.192.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:09:5c:41:a0:b9:c6:1c:08:62:87:ad:81:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:37:53:9e:e3:c7:27:5f:4a:f1:90:d8:fa:
36:db:5b:bc:73:0e:3f:33:49:c1:5c:19:df:0c:67:
70:5a:ab:4f:18:16:c4:47:77:b7:0f:8c:fc:e7:c5:
c1:41:3a:44:7d:48:06:90:cc:5d:91:b8:60:1d:28:
be:db:13:89:36:aa:c2:2f:f9:db:07:d3:f4:6a:c7:
5e:2f:18:e5:94:1a:8c:da:4b:9c:0a:30:d6:75:9a:
86:1a:b8:cb:d9:aa:fb:a0:ab:74:87:6c:5b:43:c5:
62:12:5f:57:b8:39:0b:04:f5:58:5e:5a:19:44:d8:
3e:9c:9f:ab:b4:6e:89:23:a9:42:d0:43:e8:9e:53:
76:9e:02:41:46:41:d5:9f:06:c7:0c:9a:6b:eb:22:
22:93:be:91:01:a4:58:7f:6e:42:64:6c:81:26:e2:
e2:c5:09:ed:e3:ea:16:03:e6:19:e8:c6:57:64:fe:
38:70:d1:d2:9c:89:36:f9:a4:0e:48:df:04:95:3e:
87:64:ae:44:19:75:ae:4c:e0:6f:4e:8e:04:51:00:
f9:4a:38:0d:db:5d:78:90:4b:c6:be:42:bc:5b:ff:
0e:dc:92:fe:d0:88:1d:c5:86:e6:3c:0c:b1:26:71:
06:52:ba:c4:06:9b:ea:d1:2e:11:d2:b8:b8:1b:0c:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.192.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215612
Signature Algorithm: sha256WithRSAEncryption
09:94:3b:ed:7f:48:43:28:ab:73:b2:66:be:af:47:e1:a9:09:
34:1a:e3:2b:be:ff:56:3f:f7:ab:09:f7:fb:44:59:26:2e:c0:
fc:af:85:b0:04:cf:1b:2f:71:9d:e8:d6:93:fc:87:a5:02:90:
6c:da:5d:1f:77:8f:68:e4:68:21:13:e9:fc:a7:09:2a:6a:94:
f2:47:3a:ca:07:75:4c:4d:46:cd:d8:6b:ff:db:b5:f1:d5:d0:
a3:82:b5:ba:42:68:1d:83:80:8b:33:4b:69:89:ab:9a:5e:27:
93:83:82:46:c3:1d:b4:7f:c8:6c:4a:14:1f:ab:cc:f1:04:f8:
db:b6:3e:6a:42:1f:c6:e6:2b:10:a4:70:fd:61:cf:9b:6b:e6:
7a:59:40:5c:b2:eb:bc:a2:b6:ce:cf:99:df:9b:53:82:50:cf:
f8:b1:bc:c4:1d:34:0c:04:8d:4e:c2:26:f3:18:3b:b2:24:8a:
b3:b1:95:8f:96:ea:c3:30:b2:5c:0f:78:4b:cc:b1:30:70:07:
b9:1f:72:59:4c:47:e9:0a:83:92:c7:30:b2:f8:e5:96:da:01:
85:f1:c4:36:9c:c2:84:03:9a:2a:c0:54:7b:9f:be:0b:90:e4:
96:d5:47:85:8b:55:0b:68:e5:44:ce:c8:89:cc:d9:06:03:f9:
06:13:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:14 2025 by rpki-client