Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer (raw, json)
Hash identifier: wnVrq5U6M/xJlX65zrBbzEBthM84xzf1HlyI/7frgmo=
Subject key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73FCF11DF89AB0AA46AD6EE34D242
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25386
IP: 62.80.160.0/19
IP: 185.117.240.0/22
IP: 2a06:9000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3f:cf:11:df:89:ab:0a:a4:6a:d6:ee:34:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:3b:f4:7b:ea:60:13:2d:08:9a:db:53:41:
5a:41:1b:94:04:3e:73:af:9e:df:47:ed:8a:88:a1:
59:8e:bd:af:4d:a0:3d:93:f7:9c:d0:dd:bd:71:10:
87:67:a0:79:0a:36:de:42:86:15:43:d8:dc:8c:e7:
30:a2:f1:2b:ef:79:4a:82:f0:aa:a4:12:78:36:52:
94:91:51:cf:c4:c9:03:86:11:10:02:34:cd:60:8b:
a1:4b:0a:05:6b:43:17:03:3f:9b:a5:e7:48:54:4e:
eb:66:eb:a4:e1:a5:9d:5a:c8:6f:81:a2:0a:b3:f1:
dc:ca:ef:51:aa:2c:3c:50:4a:82:b0:0b:f5:0e:c9:
69:5e:1e:05:e2:0e:09:a9:6c:70:5b:ac:e5:29:fd:
fe:37:b0:26:b6:58:ef:77:96:44:be:ef:86:96:6b:
09:7a:03:d4:29:5d:e4:12:63:6b:7e:64:cc:71:ad:
5e:84:59:a4:54:4e:06:16:dc:31:93:25:16:55:1f:
b1:8a:c2:7c:02:8b:3c:24:63:6b:1c:49:99:95:c8:
98:b6:cf:f8:70:fb:a8:1d:f7:a4:2b:8d:af:08:a3:
ed:91:4f:9c:42:e8:49:b4:9e:5e:21:19:73:9a:ea:
77:e6:1a:16:cc:f7:f6:95:24:41:74:2c:86:44:6f:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25386
Signature Algorithm: sha256WithRSAEncryption
7b:4d:99:72:51:01:1e:b9:3e:0a:0d:82:ee:63:ee:1c:ee:54:
5b:5b:27:33:8a:d0:ed:33:e4:bc:28:1b:3c:1c:df:22:c4:ae:
51:2f:ab:8d:ad:86:3c:c0:c3:a9:49:0c:13:90:b9:a7:71:c8:
69:44:89:9c:e3:32:66:e2:0e:e7:57:77:ca:b0:4e:8c:74:66:
4d:ab:c7:30:5c:74:06:78:c7:63:72:81:a4:65:12:e7:bc:08:
40:8e:80:1d:ff:a9:c0:c9:7f:8a:f2:ed:88:e0:27:bf:e0:e5:
28:4c:cd:c7:58:93:7b:29:f1:dd:ad:52:f0:01:28:75:a7:68:
4b:52:bd:d2:77:40:2c:cc:01:2c:f1:61:0a:23:3f:a4:47:b7:
74:b9:e0:c1:14:1d:d0:cf:be:8a:d8:ec:f8:37:d8:1c:8d:e5:
7d:56:02:74:73:79:cd:0f:ac:e2:17:b9:4d:ff:b6:bf:9a:ed:
cf:ba:a0:e4:32:b0:1e:42:4c:da:3b:31:f2:f1:b6:45:29:ee:
dd:9b:c5:aa:95:4b:14:c3:cd:7b:2c:32:c7:60:cf:d8:fc:ac:
8c:a9:54:15:e5:f2:dc:e0:e8:c3:c5:65:67:35:26:fa:70:37:
88:b8:b4:57:62:7f:c0:9d:95:de:64:cb:dd:7f:1a:b5:03:23:
3c:09:05:01
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQj1z/PEd+JqwqkatbuNNJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGJkOGU5OWY4MjdmZjk1ZDI4MWQ0ZmY3YmMyN2YwNDVmYWJmMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlk79HvqYBMtCJrbU0FaQRuUBD5z
r57fR+2KiKFZjr2vTaA9k/ec0N29cRCHZ6B5CjbeQoYVQ9jcjOcwovEr73lKgvCq
pBJ4NlKUkVHPxMkDhhEQAjTNYIuhSwoFa0MXAz+bpedIVE7rZuuk4aWdWshvgaIK
s/Hcyu9Rqiw8UEqCsAv1DslpXh4F4g4JqWxwW6zlKf3+N7Amtljvd5ZEvu+GlmsJ
egPUKV3kEmNrfmTMca1ehFmkVE4GFtwxkyUWVR+xisJ8Aos8JGNrHEmZlciYts/4
cPuoHfekK42vCKPtkU+cQuhJtJ5eIRlzmup35hoWzPf2lSRBdCyGRG/DrQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFK29jpn4J/+V0oHU/3vCfwRfq/EFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2I5OTNj
Ny1mYThkLTQzYzAtOTM3NC0xZDMxYTE5NjAxNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYjk5M2M3
LWZhOGQtNDNjMC05Mzc0LTFkMzFhMTk2MDE0Ny8xL3JiMk9tZmduXzVYU2dkVF9l
OEpfQkYtcjhRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQFPlCgAwQCuXXwMA0EAgACMAcDBQMqBpAAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAmMqMA0GCSqGSIb3DQEBCwUAA4IBAQB7TZly
UQEeuT4KDYLuY+4c7lRbWyczitDtM+S8KBs8HN8ixK5RL6uNrYY8wMOpSQwTkLmn
cchpRImc4zJm4g7nV3fKsE6MdGZNq8cwXHQGeMdjcoGkZRLnvAhAjoAd/6nAyX+K
8u2I4Ce/4OUoTM3HWJN7KfHdrVLwASh1p2hLUr3Sd0AszAEs8WEKIz+kR7d0ueDB
FB3Qz76K2Oz4N9gcjeV9VgJ0c3nND6ziF7lN/7a/mu3PuqDkMrAeQkzaOzHy8bZF
Ke7dm8WqlUsUw817LDLHYM/Y/KyMqVQV5fLc4OjDxWVnNSb6cDeIuLRXYn/AnZXe
ZMvdfxq1AyM8CQUB
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:06:00 2025 by rpki-client