Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.cer (raw, json)
Hash identifier: B0Eysvw+1ehOXAnxUK/oWnif7P4oqmB/U2ZlfPm1gjU=
Subject key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9A725FC553AC1EF0E678725E2FEEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49537
IP: 194.169.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a7:25:fc:55:3a:c1:ef:0e:67:87:25:e2:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:ec:76:ab:3e:ce:ee:3f:b2:e9:d3:3b:b1:
d1:8a:3e:35:3d:c8:d2:af:36:a8:e0:0a:5d:e8:92:
f5:40:5f:0a:7a:42:cc:94:70:0d:2e:18:af:c5:d0:
56:87:42:36:f2:6f:18:7c:66:f5:c1:8f:0d:fa:b7:
61:c9:1f:63:16:e8:b9:7f:bc:38:c8:0c:0d:69:18:
ce:5e:c6:c6:fb:ce:e2:55:a4:87:9e:6d:9b:36:12:
18:e5:5d:71:29:bb:33:f0:d4:2b:ab:de:e5:67:d4:
8b:cb:55:ee:36:93:e3:c0:3c:50:66:6d:f5:15:b0:
20:3b:09:ec:81:81:89:4f:50:62:3c:ab:01:3f:33:
b8:8c:38:bf:fc:63:3c:03:89:3b:cc:b6:3d:24:cd:
66:c2:a4:6a:0a:ef:3c:28:88:0c:eb:02:ce:0a:86:
00:b5:64:1d:73:bf:c2:76:f1:f2:32:35:db:09:b3:
ba:7a:5d:3a:cf:d1:d3:c2:5a:3f:e4:df:09:93:c9:
1c:3c:45:92:a3:47:81:e2:f2:a8:56:7a:63:b3:ee:
d6:fd:fa:a9:77:5d:50:a9:e6:8a:5c:b4:7f:72:c2:
bf:79:20:28:db:e7:56:67:74:e1:c7:a0:84:e2:bf:
36:4d:c7:42:c1:2e:e2:34:15:de:8f:21:48:02:7d:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.214.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49537
Signature Algorithm: sha256WithRSAEncryption
8b:68:16:83:6d:d4:60:e1:d6:eb:31:43:81:52:3b:a3:af:26:
d1:f0:7d:5b:46:05:89:de:53:93:5a:7c:55:40:7b:42:c7:b7:
bb:a4:8c:47:5e:37:0a:c7:83:9b:24:f3:a6:a0:60:4c:c5:25:
a7:99:bd:01:6a:80:48:1c:4c:41:23:ff:d3:73:dd:5a:3a:db:
15:f4:f0:3c:f8:df:26:a2:07:c2:9a:a3:86:50:bb:6a:aa:f1:
a8:db:9d:da:a2:6e:a0:f6:e4:ea:03:ba:33:21:1d:76:9c:9c:
c8:c5:f0:30:38:82:94:7e:90:48:9a:b2:96:40:e3:ff:a7:16:
e9:ca:41:7e:bf:57:30:3c:eb:3d:97:2b:d6:22:bd:97:af:2d:
1b:40:6f:a2:98:97:00:6b:98:02:0c:80:0b:3d:e4:27:a2:1c:
6b:21:59:5e:fc:81:a2:b4:f4:1e:95:40:a9:2e:60:c7:74:eb:
54:c1:a2:77:b1:73:07:cd:49:c5:fe:c8:8a:48:af:61:ff:05:
91:65:a9:ee:71:ef:4f:28:48:19:56:81:47:3c:71:44:b7:3c:
11:94:12:bd:10:a1:c5:30:9b:2f:0d:f7:0f:c4:37:c6:10:99:
06:ae:a7:22:91:e9:68:32:ff:b9:e9:97:33:76:d2:6a:bd:11:
c5:d5:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:39 2025 by rpki-client