Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.cer (raw, json)
Hash identifier: f6P28LARBcIjw7pjheA9UTsjtJkpGHGrSHi8Ao/1yHQ=
Subject key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F3F3E4B3A8B357BABD25C8122B840
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204149
IP: 185.112.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3f:3e:4b:3a:8b:35:7b:ab:d2:5c:81:22:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:91:f9:7e:83:ec:af:4d:cf:18:16:4b:af:
4f:a2:be:cf:69:d0:eb:95:c9:fa:d3:fc:19:11:08:
59:cd:88:86:c4:69:bb:62:0a:e9:04:b0:0a:a6:25:
f6:61:f1:7b:94:b5:1d:36:8e:70:ae:60:22:1c:b2:
5f:df:6b:a3:dd:af:de:7e:86:81:98:dc:26:a5:35:
20:0a:d2:3b:60:98:c5:a1:ca:b5:98:93:70:c8:c4:
0b:e1:6e:65:b5:ff:47:01:38:de:50:31:bf:ca:41:
ab:38:5c:75:d9:00:95:20:35:97:a5:24:98:63:08:
9d:cf:70:d5:cc:b3:c4:31:ac:9e:ba:e1:25:3e:1d:
53:9b:2f:e9:ab:d2:29:e3:b7:a3:ac:0a:55:55:79:
bb:f7:c3:29:eb:7f:bf:06:7b:be:8f:0e:1f:c7:14:
af:5e:d7:f1:c3:e9:c2:f7:26:3d:7f:77:5c:9a:f5:
5b:38:6b:b1:9a:1e:79:61:45:31:21:74:35:a9:f4:
fb:60:ac:3a:29:cc:47:87:ff:e0:2e:6b:2f:bd:d0:
51:31:1d:d6:d7:5c:f8:09:02:a7:66:2b:eb:d7:ef:
3c:dc:b2:86:ed:20:43:75:e1:08:3b:ef:60:b1:48:
70:b7:a8:03:81:e5:6d:34:36:48:ad:f9:56:5c:b7:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204149
Signature Algorithm: sha256WithRSAEncryption
55:49:38:e9:c8:1b:c5:58:c8:84:38:6d:bd:89:9a:80:e1:bb:
b5:a8:cb:02:4b:86:48:81:a3:29:7b:b3:4b:d2:f9:0f:90:ba:
c2:ac:b8:0b:9c:42:2f:74:64:29:d7:5a:f1:32:7b:e0:42:8e:
5b:28:b6:0b:b0:82:d9:dc:f2:6c:a8:3d:59:f3:d2:d4:5a:8f:
0a:69:d9:35:06:6b:56:84:60:60:8f:83:a0:d9:3a:8c:bb:ae:
de:d2:b2:70:8d:38:32:6b:5a:e4:26:85:94:5c:64:ce:c6:57:
08:ae:73:e0:ef:d6:39:b3:05:47:e3:ba:04:88:a3:f2:16:0d:
58:e4:91:86:a5:98:67:3f:30:83:7c:e3:5b:26:96:fb:e3:d6:
ba:4f:79:7f:fa:ff:25:a8:a0:ea:cc:74:62:ff:ac:e4:ca:62:
1b:59:56:88:b8:74:32:22:a5:96:2b:fe:ef:04:97:d4:9d:1a:
bc:78:f4:32:82:79:a0:d2:b9:11:95:d9:18:ed:85:79:ff:67:
09:d9:cc:e8:ca:11:f9:ad:2a:c4:5b:3c:8f:7b:70:0c:83:ea:
59:0f:7b:1c:b2:f8:5e:d9:8a:28:80:45:85:53:c9:a6:bb:0c:
d8:2b:60:62:9b:fc:e0:24:c4:b2:cc:76:5c:62:2a:0c:3f:ad:
3d:70:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:38:57 2025 by rpki-client