Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
File: swUV9H2pJdn5ATgIqpETwr3pbZo.cer (raw, json)
Hash identifier: Q/Dr5GRXZYrPokbe1Q4L50Ht6RwgJSIea9TBimldwYg=
Subject key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA00DC610E519DC23E34D11D0884B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201661
IP: 185.53.152.0/22
IP: 2a04:cdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jan 2025 01:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:dc:61:0e:51:9d:c2:3e:34:d1:1d:08:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:15:ce:98:ae:1c:f4:20:e6:ed:bc:b3:6a:
9b:ee:c6:0e:0b:14:1e:b5:c6:a8:bb:78:d8:f6:2b:
3d:4b:66:51:68:e6:eb:01:7e:87:0b:d0:ee:06:cb:
c9:f2:50:e4:d2:52:7b:54:3f:8c:02:80:5b:54:ae:
1e:90:4f:91:d5:ab:ca:4d:56:8f:38:55:2b:d8:0f:
19:fd:80:43:b4:94:92:8f:8a:7f:ed:30:1d:fd:66:
f9:ac:88:45:bc:f2:56:d7:3b:ee:15:e7:39:f5:70:
dd:6a:d3:0c:4e:f8:6d:c3:8f:5d:cb:37:d8:f7:c2:
c6:06:36:d3:b3:da:b4:5e:a4:48:bc:1c:87:b3:23:
ce:ff:a4:5b:72:54:ea:ec:aa:4f:bc:91:1b:d6:ef:
ac:79:d6:05:d7:3b:18:82:16:dc:bd:50:61:24:a0:
36:98:e1:5d:61:25:d4:cd:b4:03:a3:9b:ec:3e:2b:
01:39:95:1f:43:38:1d:b8:3a:4b:a3:77:f2:93:9a:
e9:b6:a6:cd:d6:8b:66:9f:27:c2:db:21:66:ec:c6:
8a:3f:d9:e6:d0:85:97:51:25:cb:bb:d2:c7:53:a2:
6c:ff:a5:21:c9:7e:58:90:a4:7e:4b:87:2d:7f:06:
ee:ed:76:78:01:6b:fc:43:ea:60:5e:77:0d:b2:28:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.152.0/22
IPv6:
2a04:cdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201661
Signature Algorithm: sha256WithRSAEncryption
26:1c:c4:85:cf:85:68:c6:e6:78:68:7f:97:1c:b9:71:2c:b1:
0a:47:4a:e5:70:5d:f3:85:d2:ec:1d:2c:0a:00:9b:b7:d6:59:
7e:4f:2a:71:15:9e:7a:cc:9e:0a:1a:cc:6c:32:19:f3:61:8f:
b2:e3:bf:c1:8f:47:3b:66:97:0a:47:cc:b0:d0:f1:72:b3:29:
68:e5:33:c2:f0:91:b4:a0:0a:f7:12:f9:2f:b8:e1:33:72:69:
7f:33:83:12:84:52:61:41:4c:0b:06:00:93:5d:78:eb:85:f3:
5c:f7:54:c3:82:f4:5d:83:3c:36:ee:3b:ab:89:43:5d:78:82:
96:ae:4b:99:23:dc:49:8c:4b:76:7b:90:5e:39:cb:5f:81:e1:
77:39:a2:96:61:96:84:bb:f7:c2:86:1f:4e:6a:0d:61:a2:42:
e7:9e:b3:b5:d0:e3:79:bd:fa:de:45:a5:94:6d:9a:f8:27:56:
83:b9:90:9e:48:49:23:87:32:2e:22:4e:75:41:5e:2d:22:b4:
6b:f3:bc:2c:10:49:28:3e:83:2f:e8:b4:95:5e:c3:0a:5d:6f:
71:51:7f:98:95:07:bd:8e:ab:c3:6a:13:9c:66:ff:0f:8d:44:
aa:18:76:7e:cc:8a:44:fc:07:cc:9c:60:40:78:38:ee:27:bc:
58:e5:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 07:28:56 2025 by rpki-client on console-ams.rpki-client.org