Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
File: xU3YgoUsxFhrH-40wFAdXbfWDws.cer (raw, json)
Hash identifier: 43FCVSrBbq3cGYhvhnCrR3h9pSw+YgRTxQSO6ubNpV8=
Subject key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3FD6EFE75DA0F116A78DCF84842A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204572
IP: 185.246.144.0/22
IP: 2a0d:8580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fd:6e:fe:75:da:0f:11:6a:78:dc:f8:48:42:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:8d:50:1c:dc:9a:70:2e:ff:6c:72:f5:7b:
f2:16:f2:1a:75:f8:41:0c:84:8b:c4:4e:b7:ab:a5:
3b:b7:ad:47:9e:ef:ab:63:01:bc:2a:ae:8b:8d:58:
9d:2f:ac:4e:df:bd:a7:d8:f5:0b:c2:29:65:c4:cc:
57:be:2f:d5:fe:32:b2:2a:77:5d:2b:d1:4e:5c:3f:
48:25:78:72:5e:1a:2b:f4:41:89:af:d7:62:3b:77:
94:28:f7:f3:f0:fd:7b:fd:ae:4c:b3:4a:09:6c:44:
2c:37:b8:cc:50:d2:96:41:4b:9b:77:ca:e5:b9:21:
4d:4d:d4:71:fb:c9:14:a9:f4:6b:7a:47:04:39:72:
70:bc:9a:5d:26:b1:4a:1d:d9:14:31:94:aa:b7:b0:
31:d8:e9:24:70:43:01:22:89:74:e0:39:82:8c:a6:
42:cb:2f:60:aa:99:f6:07:64:58:63:78:e2:78:94:
f0:1f:16:fa:ca:fb:d0:36:d1:5f:79:ed:9d:09:c0:
96:5c:07:42:c8:d5:c7:9e:63:80:a1:d9:17:0a:bc:
50:a7:0a:fd:48:1b:24:fa:2a:5e:c7:1a:59:dc:5c:
fc:4a:4a:4e:71:75:92:f5:ef:2b:1f:bb:b0:de:4e:
83:0d:3f:12:71:c0:6e:52:bd:d5:a0:18:af:04:00:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.144.0/22
IPv6:
2a0d:8580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204572
Signature Algorithm: sha256WithRSAEncryption
44:8e:ca:ee:bd:16:26:8d:9d:5a:fa:00:7a:9e:a9:e9:2c:6c:
ce:b1:2c:cc:38:01:a3:ce:b8:22:6b:d6:e3:f1:af:14:b4:ff:
57:ef:a8:bf:4b:67:51:53:99:2f:1f:e5:14:13:37:90:ba:5e:
b5:19:e8:05:c3:42:f2:e2:db:53:74:e9:a6:dd:39:f0:7c:10:
d6:cd:df:72:2c:50:d9:3e:e3:2a:d5:da:09:6e:13:8a:54:90:
02:94:5d:d9:0f:be:62:a7:23:0c:4e:d8:30:ed:5c:c2:13:a2:
81:b8:07:3e:3f:c4:25:b7:f5:31:9c:4a:eb:b8:97:23:26:6b:
d7:30:e6:85:49:79:ae:cf:44:bf:5c:0f:b6:0a:fc:80:99:6a:
80:56:72:b5:6e:21:25:3c:05:cb:65:63:f4:c3:c0:00:09:4c:
e7:12:dc:0d:4b:f6:f2:96:ca:a3:ba:de:01:c0:a7:3c:fe:5a:
d5:8c:db:b4:05:1b:4d:88:92:45:c8:78:d3:16:8c:e8:34:65:
a7:3f:e9:51:ac:53:7f:cc:b6:0f:0a:42:20:82:27:bb:e1:69:
25:4d:b5:77:c6:83:9c:4e:04:5e:f0:1c:d1:21:13:4a:b8:f5:
b1:39:42:97:59:21:88:e9:6e:f7:61:30:43:f0:5f:9b:00:f3:
83:a2:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:29 2025 by rpki-client