Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer (raw, json)
Hash identifier: Atp+vgZl8j8Tj9uEBhgQeDXwXWj3iHaZkSo98CFVEvA=
Subject key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C551C1D25669B4A6D924C3B05984E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47512
AS: 211832
IP: 195.43.136.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:1c:1d:25:66:9b:4a:6d:92:4c:3b:05:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:b2:19:b1:44:1b:f0:11:1c:26:1c:c3:6e:
10:29:7d:08:1d:4d:3c:49:a6:ae:6c:fd:ac:35:f3:
f8:1a:e0:b3:3f:9c:8f:62:98:06:a6:e1:28:fb:dc:
55:a9:3d:90:6a:b8:95:2a:2e:12:b1:cc:c1:c9:1a:
a9:5f:ad:71:b0:72:90:10:eb:82:aa:f0:20:cf:6b:
98:19:a6:7b:69:67:6a:61:ec:6a:78:35:ae:f4:1f:
17:87:08:e4:71:73:0a:6b:81:ef:67:2a:4e:ca:ab:
ec:f2:0f:43:0e:7d:6b:05:f2:ca:58:dd:c6:e3:e6:
04:95:93:3c:4e:8f:e8:15:f1:af:5f:2f:65:4a:5b:
2e:4e:95:12:63:69:17:aa:9e:ea:56:ee:62:f8:71:
c9:06:c0:f9:ce:19:4a:7a:a6:a2:64:bb:72:31:a9:
28:bc:58:ee:2a:d8:25:28:c4:08:f5:f6:e5:b1:a6:
14:ef:61:88:25:aa:59:64:a6:ab:7a:82:1e:7d:48:
21:19:15:d7:f7:fd:be:74:06:78:83:06:f3:aa:25:
b7:1e:b7:d7:6b:76:17:69:24:f7:53:29:19:df:6b:
6b:35:51:14:32:46:4a:98:8d:c3:d7:ac:d2:16:c8:
5b:fc:70:eb:fa:63:ab:fd:21:cf:20:49:eb:bb:ff:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.136.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47512
211832
Signature Algorithm: sha256WithRSAEncryption
16:f2:df:14:f9:05:b5:d9:3f:62:e3:92:dc:49:0d:34:58:a7:
86:7f:15:b0:3a:4a:09:62:9a:fc:4b:00:a9:87:c7:12:76:63:
a4:78:cc:43:e5:0f:00:41:04:d5:18:57:fd:1d:e6:aa:b1:d2:
90:9b:51:f2:a3:d0:09:73:1a:6a:77:9e:66:59:bf:06:ef:c3:
94:8a:af:71:8f:f2:a3:8c:e2:56:d1:ee:19:19:af:77:a0:c9:
a3:a1:9e:3c:74:69:c4:aa:19:50:e9:ab:30:d3:d1:f6:78:59:
af:d9:be:01:9d:0b:77:a1:13:05:2d:e7:bd:a4:3d:66:85:ad:
bb:10:59:06:b2:d5:9a:58:25:e6:4d:7d:13:04:60:1e:dc:09:
2a:4b:12:08:7a:2c:05:1d:27:1e:b3:f6:2c:1e:7b:be:e0:02:
ea:fe:dd:bb:d2:59:dd:e1:d9:d4:e0:61:4e:e2:75:d0:bd:d2:
db:73:43:04:d3:d3:0b:7d:00:e4:4d:a3:6b:89:de:09:b7:ea:
97:d8:fa:85:e6:a8:13:7b:d4:46:ee:83:40:83:19:f6:fa:80:
2d:7d:87:fa:4f:81:fe:54:90:38:9f:12:61:97:fb:80:3d:00:
6c:7b:81:11:97:31:3a:18:9c:9d:59:a0:a5:f2:85:d1:fa:fc:
d0:3b:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:11:04 2025 by rpki-client