Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
File: u_e8bHyTo8-x4lu778TyB64lvaU.cer (raw, json)
Hash identifier: iCEkyxp8dd14LtdP+92lwYqhmdnsgofDkX67ON6ZpAM=
Subject key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274835B8CD5B33D28DCD55A4DB737AF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199474
IP: 46.255.24.0/24
IP: 2a13:b180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:35:b8:cd:5b:33:d2:8d:cd:55:a4:db:73:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:f6:0b:02:ec:69:18:61:3a:29:ef:49:b7:
40:83:e4:95:90:f1:2e:78:4c:5d:38:54:3a:86:ad:
03:02:5c:84:80:89:97:6f:6b:c5:a3:f7:72:77:8c:
39:f3:1b:ee:df:19:17:a1:06:f5:e5:1f:b1:37:92:
c7:c5:bf:84:2a:32:57:29:8d:2f:fb:4b:95:88:2f:
6a:80:41:07:a7:b0:58:38:ee:fe:37:8f:1b:82:20:
1e:88:fc:dc:d0:82:b3:65:1f:10:da:e1:01:c5:65:
9f:4b:31:a3:50:91:a4:f6:89:c1:2f:40:eb:77:e4:
df:20:31:a2:5b:f5:2b:68:62:86:1a:21:41:48:77:
25:c5:a4:72:03:f0:1f:6d:de:f2:f2:43:fa:4b:ce:
ab:30:3b:68:70:ce:d8:e7:33:fa:d3:6d:30:47:8e:
27:52:2f:c8:12:d2:80:9b:e3:84:8e:94:3a:00:7a:
e7:6d:df:e6:f2:a2:22:ad:84:10:75:31:b2:ec:b8:
5e:6f:a0:3f:26:0f:0a:3b:df:95:ad:75:0f:78:8b:
06:1e:e5:e7:5b:2c:ff:45:18:93:6c:de:81:da:fa:
b0:43:68:c3:df:cf:ef:b5:f9:14:41:a0:5a:78:46:
da:56:b1:98:6e:e7:1e:9e:e8:ff:f5:37:d3:ab:54:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.24.0/24
IPv6:
2a13:b180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199474
Signature Algorithm: sha256WithRSAEncryption
8e:57:68:b8:8a:9c:c7:28:a1:ad:28:60:22:6b:6c:38:d1:76:
01:34:ca:f0:7f:a7:3a:13:1e:ab:ce:3f:d6:72:09:9f:0d:24:
7d:32:a4:7d:f0:2d:51:3f:ae:fa:67:cb:6e:6b:76:f8:0f:f7:
e3:ad:49:5e:9e:ec:67:9b:e3:3a:74:5c:35:f6:ff:75:b9:85:
c7:d3:00:97:1f:2d:ce:7a:2a:ab:d8:77:4b:4e:b0:84:68:41:
6e:3c:b9:23:67:bb:54:f4:6b:92:81:41:6e:02:19:a1:6f:d6:
70:c8:66:03:c0:8e:56:32:09:21:c6:65:8e:2e:41:c7:86:88:
4e:fa:0c:e4:d3:24:69:9d:13:0b:1e:8a:ae:c7:5d:82:cb:02:
f2:c3:65:08:36:f8:e2:1a:60:08:41:90:1f:37:06:60:ee:5b:
51:7b:77:64:f9:0f:1f:8a:42:09:54:ea:af:a0:45:cf:96:ef:
0d:1e:76:16:61:f0:8a:c0:36:43:57:b8:5a:cd:a6:00:8d:60:
86:7d:47:9c:54:c5:ae:d4:33:a1:83:26:22:cd:39:a6:d8:e0:
4e:ac:6d:89:80:fd:8f:ef:74:38:b7:68:da:cf:7b:a6:37:77:
78:95:52:7b:47:64:b6:ac:57:e6:36:33:ac:ec:6e:00:8d:2a:
a6:31:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:27 2025 by rpki-client