Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
File: rzA4pxexVOHPpHEWgy2ibyiyowQ.cer (raw, json)
Hash identifier: uVzAaR6YzJShoNfkDHh/WmpSWDqtWAYrtJO7P3IM9vs=
Subject key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B68154C6A1AAB2D4E7079B31602E10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49214
IP: 217.22.32.0/20
IP: 2a02:22b8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:81:54:c6:a1:aa:b2:d4:e7:07:9b:31:60:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3038a717b154e1cfa47116832da26f28b2a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:4c:a3:d3:41:2d:d7:5a:68:05:22:6a:5b:
aa:e5:88:4b:8a:98:ef:47:d2:03:02:2b:ee:ca:fc:
0f:92:c5:92:99:70:ef:72:18:bb:cb:db:f0:b0:b1:
44:b4:08:b0:88:30:72:f9:2c:de:79:e4:6b:0a:89:
f9:27:8a:26:c4:cd:8c:37:a5:f9:54:1c:da:ef:be:
79:a4:bd:5f:07:4b:e1:0c:ac:1a:e1:c8:43:02:0c:
9f:f7:c7:78:6f:0f:46:75:ff:bd:9d:2c:17:84:21:
ee:30:ec:73:e8:16:87:39:4e:1f:e6:42:72:a8:24:
f4:09:5a:24:04:ec:4b:f1:42:e2:8b:ac:2f:91:1e:
dc:02:c7:76:ae:bd:d0:ec:a8:e0:bf:f6:a8:2e:28:
6a:e9:ef:94:93:1d:bb:cd:44:e5:3c:22:7e:55:00:
b5:09:d7:34:46:a9:43:6c:57:7a:f6:4c:97:eb:16:
d9:f7:93:bd:cb:4f:93:f6:3d:74:d5:85:2b:fa:4c:
e1:ba:9d:9c:50:b6:31:96:f2:b2:fc:22:1a:2e:2b:
24:99:3a:9d:87:43:a3:f5:74:6b:89:d3:80:f7:eb:
45:7c:b3:19:2d:d2:82:bb:b9:29:ec:72:b2:69:89:
b3:7d:3c:fc:98:4f:94:cb:b5:c8:61:0e:47:17:96:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.32.0/20
IPv6:
2a02:22b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49214
Signature Algorithm: sha256WithRSAEncryption
43:2c:9e:86:28:e5:7c:d7:1d:3f:24:04:8d:27:ea:8e:58:de:
12:c5:5f:a7:5f:81:1b:7a:7f:b7:39:d3:b5:23:96:5d:a0:a7:
25:fc:f7:1d:d1:68:4a:56:4d:73:25:40:36:dd:59:a9:97:dd:
d6:96:ba:2a:33:1b:d7:97:d8:55:df:11:0b:34:b3:7a:84:ba:
ee:c7:99:86:53:e4:7e:3a:ff:52:cf:cb:8f:a8:b9:00:81:12:
a6:b0:6a:7d:10:ad:d0:ad:90:fa:59:59:c6:0a:4b:be:b7:ed:
54:20:68:9a:ca:5d:72:fe:5f:ce:21:62:6a:2c:02:a4:2b:35:
37:43:41:c8:3b:2c:60:1a:56:37:eb:53:46:37:47:a7:2f:6b:
9f:40:63:1b:04:b0:56:07:3b:df:4a:30:4f:46:fc:b1:63:34:
09:eb:ee:5a:07:e4:6d:97:22:75:cb:4e:03:a2:59:84:11:5d:
96:31:af:e4:16:c6:e2:b6:71:97:69:86:22:e6:66:b8:e2:71:
8e:d8:ef:8f:6c:c0:bd:d7:c5:38:ba:1b:d9:d0:10:f6:99:27:
de:6e:69:05:9c:73:99:61:5b:6f:33:98:75:73:64:61:a2:0a:
ae:1c:ca:b2:2e:47:bb:12:21:af:09:88:21:f6:39:f4:52:51:
1c:a1:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:27:06 2025 by rpki-client