Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.cer (raw, json)
Hash identifier: 862nuq97IAlGD2dwttiIIY0j51xUKiT05c9QBPsZgBA=
Subject key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01945FBBD01FFDEECE720D14A86942A32258
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jan 2025 12:55:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208431
AS: 213342
IP: 45.136.220.0/22
IP: 2a0e:9b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:bb:d0:1f:fd:ee:ce:72:0d:14:a8:69:42:a3:22:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 12:55:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:32:f1:17:17:bd:90:c5:bb:e5:50:b2:70:
4d:34:bf:2d:ac:b1:da:3d:e6:03:dd:f0:de:e6:66:
40:b2:56:7e:0d:d4:be:64:d6:1e:c6:a3:1c:1a:c2:
0d:fd:37:91:e7:8d:e1:ac:ad:32:1e:f0:f2:1c:e9:
d7:5f:90:b7:72:b5:4e:c6:0e:e4:d4:c5:44:92:6d:
6d:8a:2d:a7:b1:c7:5c:a4:5f:af:7f:fc:9a:15:30:
90:bb:34:4a:83:3a:72:69:eb:34:a3:3c:f1:7d:6e:
3d:eb:bb:91:49:0b:0d:49:33:28:ff:6a:14:88:c7:
ba:7f:a5:6e:57:8f:3c:12:6b:c2:c3:7d:9d:78:e1:
3c:8e:7a:5c:c0:10:ad:e4:a8:45:ab:71:6b:95:21:
c5:91:23:c3:57:a1:dd:f1:94:98:52:2e:7a:5a:84:
96:f2:ac:af:05:e1:0c:6d:01:2c:57:85:ad:54:c2:
41:cc:48:11:77:73:cd:bf:99:e6:78:0a:b5:47:79:
7f:ea:83:56:df:fc:13:44:2c:93:7a:f3:94:b6:5e:
74:44:d1:4d:fb:1f:91:0b:6d:11:9a:17:c8:fe:18:
e1:79:1c:4d:87:bf:ca:67:fb:fb:73:8c:fd:e6:ff:
03:e0:ee:54:15:e0:2b:8d:a4:da:9f:68:20:af:e5:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.220.0/22
IPv6:
2a0e:9b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208431
213342
Signature Algorithm: sha256WithRSAEncryption
79:f5:43:f4:74:32:bc:9d:2f:49:bf:3d:12:ce:8a:02:49:a5:
37:f6:6d:ee:d6:1a:66:d3:28:d8:97:08:19:ff:25:c5:67:19:
17:1c:4c:07:80:6d:86:ce:80:cc:d5:a8:fd:35:64:2d:d7:80:
dd:da:b4:08:e7:6c:4f:22:fc:4a:19:44:6f:36:d3:ba:21:d1:
59:14:3a:9e:bb:bf:a3:68:89:35:12:66:95:65:e1:ea:62:1a:
d1:44:d6:4a:92:36:d6:28:51:5b:c4:0b:fa:d9:b9:46:ed:7b:
6e:f1:65:df:f7:44:b5:6d:55:b9:cb:c5:22:e2:6d:2e:17:b4:
eb:71:7b:14:e0:12:0b:99:0c:4a:da:25:2f:b0:bd:78:85:45:
88:23:77:12:8e:a7:71:9a:6b:52:8b:c8:04:b9:fd:02:c5:f6:
11:29:30:9d:7b:f8:24:85:0e:e7:e0:4d:7e:06:c6:bc:29:65:
53:c6:70:a4:fa:75:80:00:72:07:ba:cb:95:9a:f0:81:df:02:
92:fb:0a:f2:ec:0a:04:16:89:a8:25:d1:82:42:6f:ef:f1:0e:
33:94:80:24:67:29:7a:99:ef:15:97:5f:63:48:f7:7a:64:b7:
c1:31:c2:af:be:39:25:17:38:62:f3:b7:cc:d8:5f:0c:17:61:
20:f1:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:28 2025 by rpki-client