Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
File: vmBP81opyRFWvkvSKbO693yDl70.cer (raw, json)
Hash identifier: qJUhxP4/EG11RkrAQ9qB2PLaQjJfG2ualQCFWqMTPJQ=
Subject key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424458993AF2993673C850AC25968AF9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208795
IP: 5.35.104.0/21
IP: 194.116.140.0/24
IP: 2a07:aa40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:89:93:af:29:93:67:3c:85:0a:c2:59:68:af:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:84:c0:a3:7d:86:fc:8d:68:8a:2b:30:9c:
80:4c:d8:ea:0a:e0:12:23:23:ee:b8:36:a9:37:dd:
0d:04:1e:ea:9a:5f:43:10:98:80:f9:a0:d6:bc:35:
bb:7d:da:22:9d:3a:9e:d2:10:c3:25:58:7b:b3:b2:
81:95:ac:be:cc:14:54:f3:e1:b5:93:65:65:af:6d:
e1:17:c4:d5:b6:a6:11:22:f5:f0:71:53:c8:3b:b1:
b4:cd:16:8c:10:1a:6f:d7:1a:61:d2:d4:14:12:bf:
da:0d:ca:d1:a8:a9:f7:9f:80:fb:21:6b:f7:3a:4a:
14:fe:f8:6d:e3:05:a2:04:bc:ce:0e:15:20:7f:18:
04:25:b4:d1:f4:e2:a8:97:27:3c:7b:c7:f4:e5:0a:
8e:a3:60:ac:6b:55:8f:65:07:07:86:c8:ca:d4:42:
d7:74:5f:43:b8:6f:6c:9a:3d:ab:85:ce:c1:9f:1f:
fd:7d:b1:65:ae:5c:1c:89:1b:12:cf:1d:14:50:7b:
06:e1:0f:ee:a8:68:5f:7f:8e:4c:d8:8c:c8:52:dd:
9f:58:0f:1c:72:e4:67:e2:ac:ce:d4:ee:33:00:96:
8e:dd:12:0b:f2:c2:d4:59:f6:74:93:8b:e0:d7:43:
4c:fa:48:33:75:cb:11:54:c9:cb:49:57:1f:af:08:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.104.0/21
194.116.140.0/24
IPv6:
2a07:aa40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208795
Signature Algorithm: sha256WithRSAEncryption
57:b7:89:a3:de:5a:f1:49:3c:70:8d:bb:41:68:ea:98:d4:38:
9f:a2:b7:13:33:03:6b:4f:59:21:c2:7e:1e:51:07:44:56:ef:
9e:21:e5:f6:ac:3e:2c:a1:16:11:ca:5e:9c:ca:0b:1d:94:08:
33:2e:65:7c:b3:62:75:03:6b:87:f3:e1:41:cd:45:b3:42:f2:
f4:f5:af:a5:3a:b7:8f:20:07:40:82:72:45:de:5f:5c:7a:09:
3a:12:f2:4c:87:73:bf:39:bf:d1:0d:84:af:a5:86:a0:4f:ab:
3f:81:95:52:a9:a9:cf:06:a1:65:f4:b4:8b:4d:7f:3d:4a:68:
58:22:f6:79:b2:e3:12:23:78:e3:09:90:70:a3:2d:29:d1:85:
3e:ca:e9:6c:72:27:e3:9c:28:3c:37:c6:a2:78:00:d6:3c:58:
5a:34:f1:67:d4:d0:06:69:ec:4d:29:52:5d:dc:49:ec:52:c3:
55:6b:e6:66:19:90:68:e8:9f:ba:e6:45:f0:0a:aa:c0:79:29:
2b:9a:50:6d:98:17:3e:ac:39:f6:21:71:c7:df:c5:18:c6:e7:
80:5d:42:60:6e:5e:cd:92:d7:f6:f1:73:2b:e3:ed:57:35:5d:
e0:0d:e5:ff:bc:ff:2e:1c:74:6a:c7:27:1e:3d:23:b9:bc:34:
a8:f2:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:15 2025 by rpki-client