Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
File: s_sdIFBvVM-5oflFH6EKiP87L2Q.cer (raw, json)
Hash identifier: BNyYgD1etSujY5l2/garD53yUYvM3ZwU6xWhfvWla58=
Subject key identifier: B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F2229A806C185DDA67B149F75C5FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51017
IP: 89.223.72.0/22
IP: 185.75.220.0/24
IP: 185.121.72.0/22
IP: 2a0d:4f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:22:29:a8:06:c1:85:dd:a6:7b:14:9f:75:c5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:9f:ba:fa:6b:4b:89:24:99:d5:c8:47:7d:
e0:a8:e9:cc:a3:67:aa:7d:95:23:f1:95:e9:51:a8:
42:2c:25:23:68:1c:66:ca:d7:81:64:e1:5f:74:91:
b2:56:f8:7a:4e:f0:14:c7:cb:93:7f:1a:e2:1e:92:
32:a1:b2:98:85:c8:52:54:5c:2d:60:c1:7a:16:15:
f1:b7:da:cf:68:4f:ee:f5:d6:8c:ed:05:be:bf:f1:
d9:e2:01:30:98:0e:02:99:00:60:59:2d:33:64:e9:
d5:3d:24:04:27:92:0c:ec:a7:68:be:69:f5:d6:4d:
13:b3:ec:b7:34:01:43:bc:57:63:d6:40:41:81:b1:
7b:36:7c:98:ab:bb:82:94:d4:24:67:82:fa:63:fa:
f4:f4:09:19:99:72:5f:2b:2c:7d:60:bb:56:c5:43:
e1:3a:3a:34:3e:c7:00:c0:1a:2d:40:d8:77:fe:ba:
89:0a:3f:75:0e:0b:08:16:17:4c:69:85:ae:44:09:
52:a0:01:e4:24:f9:00:19:4d:7e:9c:dd:19:ec:d5:
69:fd:3e:fe:86:92:3c:9e:fc:a8:15:75:01:4f:00:
fb:74:37:0c:c2:db:2b:88:07:e8:c4:14:62:e1:50:
49:7a:80:18:cc:1e:12:a6:e2:0b:d0:3c:1a:39:c4:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.72.0/22
185.75.220.0/24
185.121.72.0/22
IPv6:
2a0d:4f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51017
Signature Algorithm: sha256WithRSAEncryption
a4:49:ca:b3:e3:91:b9:6f:3b:3b:63:e1:5b:ab:f5:a2:a2:a2:
18:01:31:39:57:3c:d7:ca:86:18:7b:27:97:e1:cd:75:bd:2c:
f6:82:18:67:19:80:2b:74:09:a3:67:a2:00:0d:1b:0d:b5:a5:
cd:6e:06:ca:af:56:20:b5:f4:35:d7:d1:c2:87:4a:82:d1:31:
68:83:d3:df:d3:44:22:f0:b6:b6:c0:53:6e:e0:60:ec:67:1d:
c2:34:31:d7:5d:77:c2:30:bb:17:35:4d:6a:0f:48:d7:8b:a8:
eb:35:d6:63:f3:90:69:61:a6:0f:ad:72:83:da:79:4c:a6:0c:
20:75:7f:43:62:30:d2:47:d9:51:db:e8:cb:c1:b8:86:c7:70:
87:eb:ee:8f:24:8f:02:c9:70:f8:11:43:af:f0:30:3f:e8:0a:
cf:b5:f7:4a:9d:a7:ec:08:05:cc:8d:2e:a5:a7:b8:94:9c:96:
c2:49:a6:5f:3f:d7:f7:60:40:8a:9a:d2:99:84:e7:8b:4b:ff:
d7:79:e0:f7:57:c8:47:e2:2a:b3:24:26:da:e8:10:51:03:cb:
29:6f:6e:14:43:60:ba:fe:09:d8:e7:b3:8b:2d:5b:a3:c9:ed:
7e:43:cb:5f:28:1d:77:53:0d:63:9b:cd:7c:0b:d1:d6:ca:59:
bf:dc:64:c2
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQljyIpqAbBhd2mexSfdcX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2ZiMWQyMDUwNmY1NGNmYjlhMWY5NDUxZmExMGE4OGZmM2IyZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk6fuvprS4kkmdXIR33gqOnMo2eq
fZUj8ZXpUahCLCUjaBxmyteBZOFfdJGyVvh6TvAUx8uTfxriHpIyobKYhchSVFwt
YMF6FhXxt9rPaE/u9daM7QW+v/HZ4gEwmA4CmQBgWS0zZOnVPSQEJ5IM7Kdovmn1
1k0Ts+y3NAFDvFdj1kBBgbF7NnyYq7uClNQkZ4L6Y/r09AkZmXJfKyx9YLtWxUPh
Ojo0PscAwBotQNh3/rqJCj91DgsIFhdMaYWuRAlSoAHkJPkAGU1+nN0Z7NVp/T7+
hpI8nvyoFXUBTwD7dDcMwtsriAfoxBRi4VBJeoAYzB4SpuIL0DwaOcQCNQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFLP7HSBQb1TPuaH5RR+hCoj/Oy9kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2M0MmRm
NS00ZjkyLTQ0N2QtYmQyNS04NmQ2ZTJmNDY2NDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYzQyZGY1
LTRmOTItNDQ3ZC1iZDI1LTg2ZDZlMmY0NjY0Mi8xL3Nfc2RJRkJ2Vk0tNW9mbEZI
NkVLaVA4N0wyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCWd9IAwQAuUvcAwQCuXlIMA0EAgACMAcDBQMq
DU+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHSTANBgkqhkiG9w0BAQsFAAOC
AQEApEnKs+ORuW87O2PhW6v1oqKiGAExOVc818qGGHsnl+HNdb0s9oIYZxmAK3QJ
o2eiAA0bDbWlzW4Gyq9WILX0NdfRwodKgtExaIPT39NEIvC2tsBTbuBg7GcdwjQx
1113wjC7FzVNag9I14uo6zXWY/OQaWGmD61yg9p5TKYMIHV/Q2Iw0kfZUdvoy8G4
hsdwh+vujySPAslw+BFDr/AwP+gKz7X3Sp2n7AgFzI0upae4lJyWwkmmXz/X92BA
iprSmYTni0v/13ng91fIR+IqsyQm2ugQUQPLKW9uFENguv4J2Oeziy1bo8ntfkPL
Xygdd1MNY5vNfAvR1spZv9xkwg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:55 2025 by rpki-client