Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.cer (raw, json)
Hash identifier: pN8T0Zd6Vv1wemzB5dkj43ns0lb9CLk1bw9bziqjxYs=
Subject key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194B703DD0B7EE67A631D09C1E7B1C92CE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jan 2025 11:41:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35695
IP: 178.216.136.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:03:dd:0b:7e:e6:7a:63:1d:09:c1:e7:b1:c9:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 11:41:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:2d:18:39:d4:c0:d7:19:26:1f:b3:96:37:
b2:91:22:cb:4a:a7:aa:d4:60:51:b0:5d:e3:bc:32:
90:cc:ec:0b:a8:e1:ca:71:af:58:c1:14:b3:5b:b4:
0c:75:08:19:e9:ee:91:3d:db:14:52:88:0e:96:01:
73:b7:ac:19:fe:86:6f:61:8b:05:f9:ad:54:8b:f3:
3e:37:85:ab:ac:62:5f:54:0e:a4:51:57:55:5f:66:
52:2d:da:12:4d:4a:05:3e:a2:d9:8d:c0:d4:c6:ba:
fd:5d:ec:8b:21:a2:6a:d0:25:83:0a:24:50:47:fa:
fc:0b:b5:fe:1b:7b:ad:29:1f:67:64:4f:d3:d2:9a:
67:9d:1c:e9:e8:9b:f4:bc:0e:0b:91:81:fa:9e:8e:
46:2e:e0:e7:d9:24:56:3e:5d:f5:46:4f:1e:25:ef:
c9:b1:c9:52:6f:b9:88:aa:63:e4:82:dc:2d:dd:e5:
17:5e:15:c3:9d:c1:86:e0:0f:26:9a:25:6a:04:3d:
69:4d:e0:5b:04:68:5d:77:00:29:15:c5:9d:0c:ff:
db:83:fe:07:d3:6f:14:7f:f1:79:e7:6d:f6:12:0c:
64:ba:83:be:62:ce:d8:f5:d0:68:db:d9:13:8c:5f:
fc:da:ad:14:fc:0c:9b:ce:f3:5f:2e:14:a9:8e:9a:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.136.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35695
Signature Algorithm: sha256WithRSAEncryption
6c:21:36:c4:67:3e:c4:20:89:12:44:2a:14:b6:26:32:8a:32:
59:16:b9:70:c5:09:5f:08:f0:d0:a0:63:0a:ea:31:d0:b3:a8:
05:a3:f5:b1:97:9e:73:45:a0:1c:ba:40:ee:55:ed:94:84:38:
24:b3:46:69:46:e9:89:cf:88:45:d0:38:d1:01:0b:7f:60:92:
d4:79:c9:2f:28:78:bf:77:c2:a2:0e:dd:e4:9c:11:ee:21:54:
ae:ad:00:61:2f:2f:a8:e8:0d:5e:2b:13:fc:e3:6f:8e:7b:10:
1a:3f:ca:0f:2d:85:8f:f0:9f:c4:c9:40:41:d1:ce:d7:61:00:
e3:9c:01:79:3b:ee:ff:cd:3e:d9:12:a0:8e:29:95:fe:fc:56:
54:30:78:a0:96:3b:b4:bc:92:85:23:6b:c9:5d:d0:48:38:52:
3c:fb:ca:57:ea:60:92:9e:10:55:51:03:a6:27:93:e2:7d:7d:
a6:67:ff:ba:1c:63:5c:54:6d:ef:e6:be:ae:36:e4:fc:62:de:
6f:7e:6e:d8:e6:ac:b5:c6:ee:bf:03:97:bf:f4:12:f7:95:47:
30:ee:11:68:9d:39:09:e6:c1:16:13:b4:a5:6e:10:e4:a6:f5:
ca:7f:3d:30:32:80:cc:e2:b5:59:20:9a:c5:7f:9f:c0:f7:a5:
9f:81:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:38 2025 by rpki-client