Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.cer (raw, json)
Hash identifier: K5ZKUU13ybF3gkejbk+yN9OhWIJIbp6jlBYLTyOwQIE=
Subject key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9BD0F538B8AF1EA5F4DCE0E40A648
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61189
IP: 85.194.200.0/22
IP: 185.7.252.0/22
IP: 2a03:29c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bd:0f:53:8b:8a:f1:ea:5f:4d:ce:0e:40:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:da:02:7d:3c:45:8f:45:cd:52:28:a2:8d:
29:6b:1a:3f:ff:91:7c:b0:b9:5e:b3:47:33:35:16:
c4:42:dd:6a:dc:1f:49:ab:cd:ff:f6:74:1d:a7:63:
0b:cb:f3:03:44:48:71:88:9a:70:57:36:4c:4b:0e:
f3:ed:4a:21:18:2a:f3:aa:fb:fa:f8:c2:6c:54:cb:
36:b8:43:dc:02:e7:df:fc:42:3a:43:d2:92:76:71:
04:3c:8d:6f:62:b6:7a:81:88:9d:0f:ac:45:8a:50:
b3:33:f2:02:5a:08:dc:f7:11:ac:26:a9:54:a3:d7:
42:43:83:14:a3:fd:06:68:0d:a9:5a:d8:34:46:d2:
69:ab:7b:cc:d0:10:0a:d6:85:22:fe:7f:a9:af:07:
45:92:1f:1b:6e:e2:ce:dc:37:8f:3e:a6:e4:43:fb:
0a:a8:ce:25:29:3b:7d:f9:fe:15:1a:03:92:b4:e8:
81:e1:01:74:c4:d1:7f:15:75:ef:f3:e0:95:53:42:
67:01:16:99:83:84:28:6e:9e:dd:82:54:7d:95:ae:
c5:37:b9:94:a5:81:00:72:bd:01:fe:84:47:76:d4:
a1:ed:4a:fd:1c:8e:cd:1b:8c:b9:03:6c:cf:d8:e5:
2c:fd:be:d2:3f:7a:ea:c0:90:59:33:82:e7:b5:3f:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.200.0/22
185.7.252.0/22
IPv6:
2a03:29c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61189
Signature Algorithm: sha256WithRSAEncryption
51:81:05:15:75:6f:f5:87:ac:89:58:ff:4d:7b:0b:13:c3:95:
f8:4d:a5:39:27:c1:0d:51:60:38:6c:f4:d8:3c:05:44:af:e7:
db:c0:71:99:57:71:51:2c:6b:99:d9:05:90:67:d8:2a:23:14:
3b:e5:03:f3:9d:ea:59:5b:94:f9:02:4c:77:00:a6:15:8b:a1:
1d:f3:1a:a0:83:f0:ed:59:7f:ed:85:79:89:1c:dd:95:8c:17:
6d:77:cc:4a:5e:39:64:0a:79:ba:f1:44:0f:38:36:83:73:e0:
ed:9c:96:a9:3d:bc:d6:55:2e:ae:d3:7c:ef:aa:5d:15:3a:26:
ab:6d:5e:ac:bd:e5:ab:75:b1:bd:ae:32:96:12:f0:7b:37:c2:
e6:da:f0:43:75:6f:7a:31:f3:cc:b5:23:09:32:78:7a:62:5f:
1a:90:03:bd:a6:01:12:f6:3b:be:d8:b1:35:8c:d8:1c:53:4d:
fa:d3:5e:45:58:38:03:e1:0c:82:5a:81:dd:e3:c4:1a:8e:f2:
fb:68:bf:e0:d6:4d:6c:d8:f6:09:d8:32:e0:86:52:7a:cb:e1:
16:d8:36:9b:72:f1:c1:b5:6e:8b:fe:b6:f3:1e:eb:be:36:ea:
76:86:69:7d:01:8f:50:84:cd:c9:5e:a0:34:b2:64:37:ea:fe:
c7:1e:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:16 2025 by rpki-client