Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer (raw, json)
Hash identifier: LJ9yBqtQCROzC28cNj2gbT7Hdy5r2TVH8nH9iPyQTG4=
Subject key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D914684E695F80FBE8534414AF18BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41202
IP: 37.110.208.0/21
IP: 185.183.240.0/22
IP: 2a0b:1c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:14:68:4e:69:5f:80:fb:e8:53:44:14:af:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:7e:41:06:c7:a4:bb:9e:21:d4:bd:b8:f4:
06:d3:24:50:85:43:41:41:87:b1:56:64:cf:41:da:
ab:50:c0:cc:6b:a1:e3:46:8c:ac:4e:c9:2b:b0:e7:
11:3f:07:2f:a7:29:b5:ab:61:8e:e7:49:a2:23:04:
43:29:53:22:8d:b1:06:d2:70:87:a5:8e:ff:2c:bf:
c2:86:77:ab:cd:d4:f6:eb:b4:58:ea:93:66:6b:56:
d5:a0:24:cc:38:1a:a4:32:ae:83:7d:ad:c0:7e:ba:
40:e5:0b:df:7f:b3:93:85:a8:f1:bf:a8:2a:a3:39:
bc:35:97:e2:9f:07:94:64:47:b5:87:f3:62:3d:24:
55:00:d8:63:ba:c1:96:96:8e:f7:09:f7:4a:72:ac:
a0:4d:13:20:65:91:e4:23:25:65:9f:f9:56:d3:d2:
e9:b2:80:37:c8:f2:70:cb:cf:4e:50:4a:ab:8b:ff:
5d:83:8a:8f:b4:88:9b:65:9a:6d:81:c6:78:f5:f9:
91:4a:a6:0e:84:44:3d:17:9c:dc:95:57:3f:6f:25:
cc:20:93:45:d0:19:31:08:98:ab:7e:84:26:e8:45:
dd:ac:e7:f7:ea:fa:33:12:17:57:62:4f:1f:3d:86:
1b:6d:f0:b8:75:d5:a1:9f:e5:5a:2b:ec:77:8f:3d:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.208.0/21
185.183.240.0/22
IPv6:
2a0b:1c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41202
Signature Algorithm: sha256WithRSAEncryption
20:96:aa:e3:c9:d9:7f:30:13:f8:d2:0c:b6:ee:a4:48:00:57:
7a:7e:ca:99:52:03:49:e4:cc:f4:3d:44:9b:19:da:6a:d4:07:
a4:f3:cf:2f:ca:d6:4d:43:6d:bc:30:58:97:30:bd:af:3a:7d:
d9:d4:4e:2f:cf:0f:f9:d2:de:96:71:63:f5:85:af:a5:4a:4e:
63:7a:9a:9c:81:ad:0d:22:b0:f4:c2:05:8d:71:94:c5:b2:d9:
bf:89:eb:c5:25:79:b7:db:cc:f0:4c:11:b7:c1:a3:57:bd:79:
3d:8e:74:98:cc:9e:47:3a:d5:71:87:59:3c:34:5b:d2:17:22:
d1:ed:57:de:63:4d:be:9b:64:ae:cb:da:5a:7a:5b:66:11:c0:
09:0d:59:93:be:59:5a:97:e2:e1:f0:54:07:f1:24:68:be:a1:
02:ad:8a:d0:34:b8:a5:e2:07:aa:c2:d1:ef:df:e1:b3:39:a5:
ed:15:89:eb:e5:00:81:ba:d8:4a:f7:0d:ee:fd:17:fc:4d:18:
1c:07:1a:c6:2f:60:c2:ff:3d:49:09:31:a9:15:0a:a1:5c:6c:
e3:a3:84:a1:71:94:b8:73:db:c0:eb:1c:dd:6d:8d:b8:ca:f3:
b6:e0:a2:d3:3e:2d:ec:2d:d3:81:ce:bf:9e:55:93:cb:c7:e2:
34:80:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:41 2025 by rpki-client