Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
File: wSrJsU_SYajSdjqtQXQyvrxJoNY.cer (raw, json)
Hash identifier: r0YgwEr0Z+nZ2ZjQEfsRmNRF7u/54BI+ahb51W2+vC4=
Subject key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9DBABE0D75039C4900796BF17DCDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208341
IP: 45.143.28.0/22
IP: 2a0e:e0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:ab:e0:d7:50:39:c4:90:07:96:bf:17:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:67:53:6e:5f:37:9c:ab:ce:13:76:cb:ad:
3c:55:12:69:7f:32:df:a8:84:6d:e4:b4:48:c2:f7:
2d:e5:b6:df:f3:df:eb:ce:99:02:6f:a7:49:4d:10:
2f:12:7f:7f:d6:c7:59:60:ac:1a:c0:2e:71:11:20:
71:b4:69:4d:94:3e:c0:04:07:e1:60:ce:9e:df:d1:
d4:8a:c4:65:85:27:1e:72:e7:e2:5f:89:c0:26:6e:
1c:c1:89:58:86:d5:87:f0:a2:b6:46:3c:67:73:88:
d0:b1:a7:13:6c:bd:61:6d:52:4b:7b:0e:90:5c:cd:
bc:46:c5:2b:fa:08:b4:ef:ee:ae:5d:67:73:51:99:
13:f0:5b:cc:11:ea:6e:19:6c:e0:e5:98:c8:05:c5:
22:dd:f3:ce:6c:08:fb:63:e3:07:18:38:8d:57:a7:
a1:53:52:53:5b:10:3a:11:46:4a:a1:c7:df:e7:0e:
c3:6f:b7:76:e9:79:13:1a:3a:f0:4e:b7:c6:07:89:
fc:c6:85:1e:f5:75:32:24:e7:44:93:97:01:55:fe:
95:02:56:c8:ae:24:f5:5c:77:f3:68:88:9f:75:f4:
7f:ed:1a:15:31:57:5e:65:2f:a6:c8:08:d2:e2:b6:
82:d1:93:74:15:47:2d:29:86:fb:46:a8:0e:83:99:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/22
IPv6:
2a0e:e0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208341
Signature Algorithm: sha256WithRSAEncryption
7d:95:5f:b1:5a:76:a8:92:f4:81:8e:5c:d6:41:bf:d9:51:52:
37:e2:5f:a7:8e:45:2f:89:15:74:04:da:1e:a7:63:b7:78:4f:
6b:85:95:29:92:7b:76:94:ba:ff:dc:21:4a:0a:5b:3f:2d:58:
cc:ac:f3:99:29:b2:43:d7:1e:06:7b:41:d7:4c:2f:bc:0e:33:
ce:77:96:ba:09:3e:99:2f:9c:62:c6:48:82:28:d5:86:02:f2:
7d:81:01:a2:53:02:d8:c7:3c:62:25:16:df:bb:3b:3f:3d:8d:
e5:89:7b:01:87:52:fa:aa:59:ee:c4:46:7d:a2:11:94:cf:0b:
fc:c1:0d:b8:44:b9:9f:b0:70:8b:3a:b4:ab:0f:1b:19:cb:80:
f3:26:fd:de:19:3c:6c:f3:dc:cb:b8:db:d5:e2:8c:85:78:85:
0c:e5:6c:00:af:de:71:82:18:f2:ac:94:bb:ac:ed:d1:c9:94:
46:f2:6a:e8:10:83:db:20:57:bc:0d:d7:8f:18:32:7f:5f:5c:
39:3e:ea:83:5c:04:1f:77:5d:ae:7e:c4:e2:60:a2:30:e5:55:
02:f9:36:90:c6:e3:f7:74:79:ea:74:a9:c9:66:76:3d:92:1d:
c3:cc:32:72:2d:a3:d4:37:da:ed:ad:54:14:55:35:67:05:f3:
7a:0e:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:49:53 2025 by rpki-client