Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer (raw, json)
Hash identifier: vl3PgQkBDapsGHqSDDWPzfjAw0C9CvlKdJCB3g59jd0=
Subject key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244498364E31EA75131447B400EACEAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8639
IP: 185.121.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:98:36:4e:31:ea:75:13:14:47:b4:00:ea:ce:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53435f4be2c543bf3483e377f80314d28230184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:e6:52:56:b7:cb:4a:8a:11:c8:83:34:b3:
a9:7c:d2:62:5d:86:c9:e8:eb:1c:52:49:ae:6b:9f:
7c:84:b8:3b:27:b9:44:64:ec:a4:96:ab:7e:ec:4b:
c4:31:e2:6e:fa:8b:83:5b:df:08:f2:80:70:dd:13:
ce:cb:89:4d:28:2a:f1:06:a5:21:84:4f:e2:92:4c:
de:a4:af:b4:0e:60:08:f7:64:da:81:20:87:cb:42:
87:22:8e:61:97:6e:d8:92:76:19:15:37:d8:09:72:
76:05:dc:62:c1:aa:46:9d:84:ec:17:18:5c:1d:c1:
93:11:3d:79:cb:0d:81:53:3d:7a:1e:d1:19:7c:6d:
de:dc:8c:23:af:52:e6:fe:7e:64:1b:a2:2e:ea:26:
32:e2:ac:ef:52:05:43:2e:0f:e5:2c:00:82:99:32:
72:cb:e1:f0:98:24:33:dd:ac:2c:d9:ba:aa:88:e1:
a5:3d:fd:53:a9:33:69:7a:6e:cc:d3:d3:3c:dc:06:
e3:11:de:11:e8:9d:95:0f:4b:3d:6b:65:bd:31:98:
49:cb:9b:11:5a:0e:53:6b:87:fc:0e:69:3c:dd:2a:
74:7f:b9:32:f7:14:a9:78:b5:62:89:2e:59:f0:ed:
a5:2c:3e:e3:2b:eb:f2:7c:82:88:6c:7d:70:35:18:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8639
Signature Algorithm: sha256WithRSAEncryption
11:6f:d9:44:75:03:70:fc:d9:ae:06:36:50:56:77:e8:0a:22:
a0:6a:6a:20:3f:76:b1:37:09:f8:27:fa:4a:76:ba:3e:a5:38:
97:fb:d5:23:0f:a1:34:9b:c1:0d:c5:50:7c:d9:6e:7a:83:86:
e5:3b:67:0d:99:f0:cc:a7:a1:81:03:23:df:05:da:bf:c4:ea:
c2:c0:2c:b8:9e:41:3f:0b:61:1b:93:1c:a3:21:eb:2a:a7:4d:
19:cb:f6:b9:77:6d:88:14:a2:aa:35:5e:8b:b6:20:5e:c5:8c:
f0:33:8b:bb:30:0a:63:4f:be:d0:02:83:d3:ed:bd:23:34:5c:
57:b6:01:f4:ec:91:0a:f1:24:c5:56:0e:41:90:d4:78:59:46:
b9:57:6a:e2:4b:71:16:a2:eb:3c:da:f2:b5:6d:c1:3f:87:5d:
ec:b7:e2:50:05:da:5c:51:a7:18:08:f6:f4:7b:37:1f:36:40:
4f:21:85:06:c2:22:9b:8e:37:d2:55:ea:f8:b7:54:4b:8a:1f:
5d:ef:47:2b:1a:58:9f:7e:04:8c:15:2b:e2:58:66:4e:56:9d:
b5:ee:b9:d4:5a:8e:6a:14:c4:51:5e:be:7e:80:65:e4:6d:6d:
32:9b:ef:4b:d6:31:1b:ea:b4:33:fa:18:25:bf:e6:45:fa:36:
cc:6c:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:35 2025 by rpki-client