Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer (raw, json)
Hash identifier: PP6GtabqPq+UySeS22R8Z9uQqAYoCJdWYiza86sqgJs=
Subject key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E413536566334C5845E9D98267DA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212103
IP: 194.115.182.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:41:35:36:56:63:34:c5:84:5e:9d:98:26:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:a3:98:d8:48:6b:84:c9:e6:15:f3:85:9c:
95:3c:c6:28:4a:14:1e:71:7a:fe:e2:2c:d9:16:b1:
9c:b2:a0:ff:77:90:d0:dd:9c:23:5c:66:d1:7a:ec:
8b:bd:04:95:fb:a7:5d:0b:2f:5e:3e:ba:d1:20:6b:
73:ca:c9:90:a9:8b:f5:a3:df:6f:04:45:bf:a2:40:
b5:fc:c7:19:24:9c:87:1a:76:87:25:59:bd:fa:7f:
0a:62:8e:82:49:48:d3:b1:fb:90:4c:77:eb:60:37:
fa:64:47:a9:68:e5:25:23:66:59:c4:78:a1:35:05:
33:93:ff:30:e5:0f:1e:35:67:94:25:a0:46:ae:95:
94:1c:96:08:68:f7:bc:47:db:e1:91:b5:2c:38:6f:
91:9a:7e:c0:75:1c:b1:aa:c3:a5:1a:f8:ed:7f:e3:
ed:85:a4:a3:28:0a:33:2a:86:d7:06:53:aa:71:36:
5c:cc:d3:37:1a:cb:0f:c5:a3:8e:2c:f3:29:1b:7d:
4b:9b:28:5a:f5:82:c6:e6:9f:ae:46:9c:11:06:15:
da:48:45:3f:b0:49:e7:f6:22:96:de:ea:01:96:15:
e0:e8:83:96:b6:68:7c:42:fb:98:46:29:14:2a:88:
82:2f:ec:57:7f:3b:d3:5e:c8:b4:80:6d:65:94:22:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212103
Signature Algorithm: sha256WithRSAEncryption
21:cf:ec:99:64:da:e9:6e:3b:ca:b9:28:ad:f5:34:f8:9e:fa:
2a:64:c6:98:5d:c1:05:55:b5:9d:f2:66:62:dd:30:e9:0d:e2:
4a:ac:c6:4e:ef:ef:9c:e3:05:d6:87:23:38:30:e9:cb:52:16:
28:0a:56:23:ee:85:bb:71:bd:b0:86:77:bb:1a:c2:ca:df:fa:
cd:06:9c:f8:00:29:8b:e5:d6:ab:32:ae:a1:f9:ac:4c:83:0e:
e4:26:f4:d2:65:36:96:7a:f2:22:b1:50:0f:85:72:d0:00:c4:
8e:78:5b:fb:41:01:b7:32:95:dd:c4:5b:12:a4:4c:d0:dc:5c:
75:a1:98:b4:77:5e:a3:65:a3:fc:1f:2a:e4:3e:0f:86:5f:06:
e7:a9:5b:2e:7c:e8:bb:2c:e2:f7:df:65:3f:af:86:96:f9:4a:
f5:46:bd:32:cb:4b:cf:3d:4a:4e:c3:d3:8a:13:97:53:3b:8b:
9d:e8:2a:40:de:8c:ec:c6:f4:05:62:23:f6:60:60:58:5b:92:
b7:bc:a7:80:53:f0:18:14:ad:6c:ea:af:f6:9b:04:e3:78:c3:
bc:8e:b9:f5:c0:ad:5e:0f:95:1d:c8:d1:eb:98:a4:0f:04:70:
3a:0d:e3:cc:9e:34:4e:c0:ec:7d:33:89:70:15:14:5a:53:45:
23:81:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:48:39 2025 by rpki-client