Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
File: uRvis2eZBLYKL8OZt4CByGsDjZk.cer (raw, json)
Hash identifier: ooPbm7Zi5av/wWdSB1XELY9l5Lku/VWFgSlgoCChaXs=
Subject key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB06218E3825B37D82A18FA854F5ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198492
IP: 83.229.56.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:06:21:8e:38:25:b3:7d:82:a1:8f:a8:54:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:78:53:be:5c:30:bd:3a:6b:71:f6:4e:f6:
ed:6b:43:e0:28:e9:cb:b7:53:50:f9:69:e0:e5:88:
80:8d:55:ca:a5:7d:db:12:5e:d2:c3:0a:ce:7d:1e:
46:b3:49:f9:27:6f:87:b6:8c:b7:f2:5c:f9:20:5d:
b3:bc:4e:73:ad:33:d9:0f:13:c0:2d:b3:ae:f7:f0:
12:c4:4d:04:79:2d:46:36:c5:2c:69:ef:ca:a5:37:
a6:5f:2b:ef:f8:a8:3b:2e:7a:b0:22:93:77:ae:06:
7b:f2:bc:74:b3:9c:da:68:e7:90:25:c5:a4:37:78:
75:1b:60:b5:77:01:25:f8:f1:0a:60:7c:a0:a4:87:
85:67:55:77:6f:95:e3:ff:88:14:2f:3a:07:ab:49:
81:d0:ea:40:1e:0b:50:32:a5:0e:8f:31:d2:21:55:
ff:a1:6c:88:05:f5:9e:b8:9e:c2:70:c7:a8:d8:b3:
14:48:89:54:7a:34:a4:1c:b3:95:81:a4:86:7d:48:
a6:6e:82:34:0c:a3:d6:6e:5a:f6:a6:e6:52:b8:03:
ce:53:e4:94:42:95:f6:8d:db:e8:74:42:cb:6a:94:
52:b7:0b:21:04:c0:ab:dc:69:0d:aa:da:ba:3c:30:
9e:0b:fc:3c:d4:de:9b:b2:22:e1:31:84:96:e9:5f:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.56.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198492
Signature Algorithm: sha256WithRSAEncryption
6a:d9:9b:79:80:f1:80:e6:b1:2c:2c:34:02:bd:01:6c:97:16:
e1:59:ac:31:ba:bc:08:be:c3:65:76:23:9e:56:dc:43:10:e8:
43:b6:30:7a:ca:9b:44:ff:39:f7:6d:bc:b1:5d:29:98:1e:25:
94:8f:43:28:5b:7c:47:21:4a:24:0a:5f:ad:4a:af:d0:b0:dc:
c4:16:6c:80:52:61:3a:f3:8d:f4:cd:80:9d:e2:b1:19:50:53:
8b:43:cf:98:78:4b:6e:56:b5:52:59:db:5a:fd:bc:be:00:b6:
6d:78:a0:9c:0e:4a:90:22:cb:58:93:5d:46:ca:cd:a4:d5:90:
20:8d:b4:b7:c1:03:81:99:82:84:ba:a6:24:c3:f9:a0:c8:b9:
3d:4d:2f:c4:1b:47:bb:2d:07:6d:23:5a:98:3f:9e:c6:ee:78:
17:fe:ad:a5:cc:8c:ad:ff:a2:5e:80:63:a2:45:78:24:78:cd:
26:54:09:7e:ce:f2:48:dd:13:65:ce:d5:a4:eb:05:41:85:b6:
78:98:1b:25:33:ef:c1:e4:2a:b9:65:e2:49:ab:3f:a6:16:98:
d1:ca:54:f0:1c:ab:7d:1e:6e:04:ca:2a:b4:a3:0a:c1:7d:f6:
47:8e:07:4c:ee:3c:02:db:70:76:a0:50:63:5b:7b:fb:2f:76:
df:aa:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:25 2025 by rpki-client