Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
File: su7525PeEaAlPVqoxT7Mrg-cPTM.cer (raw, json)
Hash identifier: FVc1xK+z6kGBTWJtFRFwOI04+suEVM+d29lW3oQZ4DE=
Subject key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1B040465F1CE89E30B18752778659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51139
IP: 178.249.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:40:46:5f:1c:e8:9e:30:b1:87:52:77:86:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:eb:00:96:0c:16:69:df:94:4a:ee:6f:e7:
c4:68:12:ff:3e:ed:f5:6f:a7:29:78:05:98:7e:23:
2c:17:e7:8e:3a:17:be:e0:72:99:3d:f1:00:dc:f7:
83:0c:29:11:37:d9:22:4f:6b:92:db:a2:e0:48:bc:
ab:d6:da:94:fb:c7:1b:65:0d:74:c8:71:4c:bb:a5:
83:9d:de:4d:42:cd:6c:33:65:12:2b:d8:cc:18:e3:
c6:0e:89:46:37:bb:4b:e9:de:e0:02:ea:d5:c1:00:
b6:70:f6:3d:c4:fb:d8:5b:6a:6c:11:32:47:c7:f1:
e2:e4:03:d5:ea:15:24:39:36:d0:9d:95:5c:d3:9a:
c4:0f:08:d9:9c:d9:5d:01:0b:43:7f:10:6e:16:7a:
2a:ca:a7:26:c3:76:f4:98:9e:fd:da:19:f9:0e:a7:
b6:80:d2:91:e6:20:c6:91:53:30:33:a3:2b:f1:40:
34:39:a1:60:22:75:f0:ed:7f:5e:4a:43:75:e5:04:
e7:04:c6:5f:7b:12:f7:e7:1f:7a:cf:e7:5a:29:bb:
88:b6:fc:2d:59:12:d9:5b:06:d0:24:a7:84:18:db:
c6:93:45:20:c9:1a:1c:d2:05:93:7e:ca:66:78:ec:
00:94:54:cc:ce:df:66:fa:fc:6a:1a:ab:f7:54:ee:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.224.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51139
Signature Algorithm: sha256WithRSAEncryption
15:85:31:ab:6d:0a:47:d9:a7:25:d3:f1:cd:e7:91:d7:d9:a0:
94:4b:7b:dd:73:04:55:6d:bb:69:3f:78:ed:14:c3:14:c0:21:
7d:66:d9:d4:b6:76:5b:5f:04:82:d0:fc:b4:ba:32:a8:ff:a1:
e1:64:44:7f:d8:42:ed:4e:14:32:69:d3:7c:2a:17:62:1e:be:
5a:d6:c2:ee:21:dd:b8:8c:20:09:34:6a:38:f2:6c:4a:83:77:
d1:80:cc:66:a7:21:07:9d:4c:c0:89:55:f1:07:ee:34:4a:66:
93:f9:2b:3e:20:cf:b0:24:d2:06:9b:e8:e0:08:81:5f:af:f2:
66:11:de:db:c6:70:bd:ef:48:f7:e6:a0:82:65:6d:7b:db:88:
2d:40:65:a3:39:40:a1:33:cb:21:db:51:b4:85:f5:06:63:d5:
0c:94:21:8c:27:9e:72:5f:33:69:36:c4:e9:21:90:26:12:0b:
f1:0a:1a:40:b7:ae:ac:3d:48:bc:62:42:46:77:7a:19:05:0c:
b5:1b:b2:c7:87:6e:13:13:7e:6f:0a:72:f8:90:c4:a6:74:3b:
63:02:ea:80:39:39:05:7b:23:8b:45:4d:2a:c0:dc:65:63:43:
62:c1:84:ef:d5:17:45:75:77:e4:b7:da:09:f3:2d:9d:6e:33:
7e:3e:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:45 2025 by rpki-client