Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
File: tCV3H5kv1037Bzbmla61nGr2fpM.cer (raw, json)
Hash identifier: ssxozDhQRD2ke3F0SSxPvaH/SI/xRTtX/YzWUYtI0wE=
Subject key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368FF9111B09CED8B11228359B53F0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51438
IP: 194.77.158.0/24
IP: 2a13:b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ff:91:11:b0:9c:ed:8b:11:22:83:59:b5:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:b5:c1:25:6f:88:34:ab:58:1f:2a:53:d6:
7e:f9:d0:67:1d:02:a8:4b:5e:70:6c:6f:f3:62:6d:
e8:eb:4d:c1:f3:5b:b6:95:51:1d:37:79:ec:e3:d5:
d2:e2:45:d7:18:0b:ff:bb:e7:04:cb:78:ed:eb:98:
19:b3:61:ea:ed:4a:c2:49:ab:18:91:28:ed:4c:dd:
69:33:5c:f4:0d:6e:0f:81:80:52:89:4f:2a:c1:ed:
d4:9c:46:f2:68:fc:18:ab:63:57:65:d7:42:5a:c7:
88:02:72:2a:fd:ca:22:c1:4b:27:a0:85:b8:44:6d:
36:a6:3c:2a:73:ca:58:4e:72:3d:28:69:20:03:c5:
d7:d5:7b:8f:32:f0:d0:2b:48:31:d2:a7:98:f4:67:
41:24:fa:59:5b:36:f0:91:e1:bc:f7:d5:4b:bd:18:
5f:b6:de:a0:64:a3:25:95:22:e0:b8:da:d4:b7:0c:
36:e9:c6:0d:70:00:66:0d:82:fd:08:61:c0:49:05:
51:0f:b1:49:e0:4a:24:07:01:ea:21:66:28:eb:87:
1f:72:c7:5c:c8:58:e4:f3:b1:05:5b:ef:0d:71:d3:
51:2c:4a:fc:c6:e6:ab:72:71:c2:f4:38:01:af:5e:
c0:ab:49:b2:5e:11:a3:a2:a5:48:b6:30:08:a1:ee:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.158.0/24
IPv6:
2a13:b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51438
Signature Algorithm: sha256WithRSAEncryption
24:e7:ff:6b:cf:79:0f:09:c8:61:4e:f7:06:a0:58:44:0d:b9:
ce:fa:59:ed:bb:64:5a:47:b7:6c:96:aa:2c:5f:05:7d:52:d9:
96:d7:b0:99:3f:f3:9b:89:fb:83:b3:44:9c:b5:01:0a:a7:1f:
71:08:c2:3a:70:8d:f7:6a:2f:db:95:09:0a:78:7a:26:a8:3c:
6b:4c:bd:c3:d7:23:e7:79:c4:ac:d5:b4:0b:af:a1:48:29:8d:
39:02:13:8c:87:c8:05:e7:a0:3f:6c:3b:98:3b:c7:c5:9f:be:
2a:c7:45:98:7c:a8:60:fa:29:e2:b3:e1:cb:04:98:49:bf:46:
ff:e1:53:b8:2d:41:09:90:6b:01:78:e9:ab:c7:c8:93:e5:53:
5c:14:a1:2e:58:e4:2c:3c:58:42:e2:02:fb:7d:4f:b3:c0:ba:
81:57:2c:4a:c2:7d:cd:cb:cf:4b:5c:89:ce:83:ae:2a:cf:6c:
e3:55:a5:50:c1:2d:8e:02:8c:eb:a0:82:43:fa:c8:52:9d:c7:
35:23:e4:eb:01:9a:ff:82:4e:f7:fc:2a:9a:22:1e:45:b9:0a:
1c:d8:64:37:7f:12:da:3d:ff:b3:e7:ca:59:6d:3e:2c:9d:45:
75:07:c3:44:3e:9a:b0:38:04:5a:35:1a:5d:74:bf:ca:f0:41:
89:c4:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:52 2025 by rpki-client