Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
File: w9yyPepY-X-tWnl7RXdB1b_msbA.cer (raw, json)
Hash identifier: qw0Sn6BgAW8gC5QxzlEp2eZ57BE2PzOEbcjmM/PfR9E=
Subject key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B4017EAE6BF12F427A722AD8E98D41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204570
IP: 185.246.148.0/22
IP: 2a0d:8680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:7e:ae:6b:f1:2f:42:7a:72:2a:d8:e9:8d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:4a:24:6c:85:76:dc:a9:35:11:b3:b9:2c:
af:96:24:6d:46:f7:33:aa:04:c1:02:6f:0d:28:88:
f8:ce:de:9e:53:74:cf:92:42:cd:17:b1:37:24:60:
c2:2a:04:ca:3b:60:83:7f:db:7d:0d:af:0a:e6:d3:
7a:8d:21:7e:19:f9:1d:83:2f:ff:b8:cb:61:d8:07:
85:e2:54:01:06:b7:ed:e9:94:e3:97:fb:c5:77:57:
ab:18:e8:bd:41:c8:49:98:88:ae:11:d4:6c:91:a7:
a5:2c:9f:71:d8:ab:31:90:67:36:7a:c5:83:68:46:
19:31:6b:d6:e7:ba:6e:db:31:6f:52:99:00:40:f6:
80:6d:6a:1a:5e:36:f2:76:da:f7:97:af:24:02:f4:
e0:8a:bf:8b:b2:e6:e2:35:b8:fa:30:9f:5a:bb:57:
df:8f:e7:a7:a8:66:4e:ea:1c:30:02:57:97:09:73:
e8:36:4c:73:d4:fa:06:c1:08:8c:38:fd:af:61:bc:
50:85:3d:ec:36:82:b6:b7:be:d1:93:89:e3:b5:18:
f8:56:8f:69:24:99:b7:ee:c4:a3:9b:17:5b:31:aa:
d6:9c:6c:32:e6:d6:cc:1c:5e:65:01:c2:fa:a4:2d:
b5:0c:8e:1b:a9:be:1c:ce:af:d5:33:e7:f4:0d:9e:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.148.0/22
IPv6:
2a0d:8680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204570
Signature Algorithm: sha256WithRSAEncryption
96:28:b8:35:a7:64:0b:a0:ba:f0:76:eb:a3:0f:1a:f7:c9:b0:
c8:49:71:c8:dc:be:46:56:39:e6:0b:dd:3c:6e:bc:47:9e:27:
eb:76:7d:95:18:fb:cc:72:29:b9:f0:5f:0d:ec:f4:76:06:11:
a2:6b:1f:b0:4a:86:e1:79:98:65:75:41:93:af:91:f9:37:46:
15:10:8b:3a:fa:82:c0:44:59:2d:7f:26:83:4c:04:97:8c:36:
29:df:10:bd:3f:0f:a6:ca:c5:70:b8:b8:8c:5f:5a:f7:3f:2f:
4c:84:d4:25:5c:83:6d:76:b8:0e:e9:1c:17:4f:9d:50:df:dd:
09:aa:05:aa:04:07:14:60:6c:1a:41:39:5c:a1:9f:11:b9:aa:
7d:d7:db:b1:d7:7e:4c:ef:5a:3f:16:c5:0e:3d:d9:d0:d5:0a:
68:9e:72:1d:60:86:a4:4b:79:cd:cd:0b:ac:57:26:83:ca:67:
1d:6f:a4:39:0a:a0:7e:f7:a2:c5:8f:e3:e9:8c:84:05:e6:7e:
36:ff:6c:99:67:f4:68:4a:c2:e4:fc:09:7f:39:6c:80:e8:ec:
8a:a5:f9:5a:4a:cd:23:fd:e2:d6:02:cb:a1:f2:56:37:d3:dd:
e9:5b:e1:24:3f:72:37:60:a4:57:39:ae:12:48:65:c2:72:6d:
15:6d:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:31 2025 by rpki-client