Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.cer (raw, json)
Hash identifier: AjY3iIk+4DumhY/MHnZ3W9WbhDfxpJEC+UnoxrjS9Eg=
Subject key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B54134EC5ABA0031DA6BBA68409210
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43014
IP: 193.200.177.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:41:34:ec:5a:ba:00:31:da:6b:ba:68:40:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:88:48:b8:91:7f:e7:f0:1d:c7:cd:8b:25:
04:12:1e:c1:1c:17:3e:b1:60:14:3d:59:5a:db:cf:
1e:e8:69:55:72:58:e3:4f:bc:4c:de:59:af:f9:f2:
1c:61:5e:f1:8b:b7:02:98:33:a3:f0:28:02:21:3b:
bb:ea:52:8a:fd:c8:df:c2:57:62:33:7c:ec:4e:85:
5c:11:0f:ac:0e:4a:f1:48:d3:b4:ec:ae:f9:5d:14:
17:d0:3f:05:fb:fb:3b:b8:2d:ca:3d:da:62:5b:33:
a1:17:17:1c:2e:d8:12:cb:f0:0c:0b:36:88:81:ff:
41:82:db:a2:1c:07:df:1e:8e:d4:20:88:53:1c:2f:
3d:bb:31:29:65:38:6a:3a:77:db:af:b2:97:ef:61:
1a:f9:b3:30:32:6a:68:e8:2b:53:24:63:85:87:6c:
cd:41:1d:23:97:6b:ba:6d:60:ff:0d:c9:09:dc:a8:
66:57:c9:c3:16:49:75:98:50:2f:71:2c:86:05:1e:
70:14:99:d5:56:45:c2:21:85:1b:f3:25:90:ab:84:
23:95:03:96:2a:4a:cc:f9:c3:73:ca:6d:89:4c:ed:
42:e2:7b:b4:ef:46:8f:90:6a:12:58:c9:75:46:68:
82:96:da:1c:dc:71:c3:07:e7:63:b1:60:56:c7:4c:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.177.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43014
Signature Algorithm: sha256WithRSAEncryption
6a:c9:da:80:8e:7f:cf:59:5e:91:3e:78:19:41:e5:04:81:d8:
ae:39:f6:98:6f:c2:33:bb:df:fa:bc:d8:0e:41:39:d5:e2:20:
e8:c1:ae:44:1c:6d:18:e0:11:c4:24:3c:e2:b0:f1:43:86:51:
43:af:b6:ac:1c:3c:9e:3a:12:ea:6a:e7:67:a2:e9:5a:34:11:
f0:3a:9c:f6:4a:72:bc:44:79:3d:e4:a1:55:78:c0:66:df:3f:
59:4d:a3:a8:bd:91:44:b7:dc:c8:17:51:3a:d8:85:8a:65:ef:
97:65:f9:e8:5b:06:a9:17:56:8a:ff:4a:94:8b:54:2d:1d:c5:
df:8d:57:ea:fc:75:69:f4:89:6e:b5:a9:59:3e:d7:ca:bb:1c:
b8:a3:c6:86:55:ee:0c:57:fe:0a:00:6b:93:22:6d:fe:62:90:
e1:0a:79:9b:cd:22:66:fb:09:81:ef:32:83:60:37:b0:98:33:
ee:68:07:b2:30:6d:40:25:0c:e0:0e:6b:6e:9b:6f:0f:40:8d:
27:dd:97:0a:77:17:55:9e:c1:7f:25:37:74:93:4a:b7:be:6b:
a0:9a:33:1d:9a:7b:59:f8:62:ff:19:a1:ba:98:02:71:36:77:
c7:83:9a:26:5b:4e:7b:af:3a:49:87:b4:c0:20:25:18:13:0f:
94:1e:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:38 2025 by rpki-client