Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
File: xW93K_PEZBpxv39LxN4RyTrd_qY.cer (raw, json)
Hash identifier: 9/L20ysgWCyIliEpAUSkwIX6OopE4ncjsoKG46Na6fs=
Subject key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC3383779E64D86880DC59FBAB471
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210670
IP: 31.222.232.0/24
IP: 2a11:7f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:38:37:79:e6:4d:86:88:0d:c5:9f:ba:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:44:a6:2b:dd:7a:79:53:9b:40:1e:7a:1a:
01:6f:e5:b8:9a:22:63:2e:e9:cf:de:cf:cc:c5:ab:
40:36:b5:9d:8c:f4:49:50:20:e9:f9:90:99:80:71:
2c:f7:25:8a:db:89:15:81:c5:99:8c:5d:6b:8e:7b:
97:d2:95:3a:ca:05:80:20:52:e4:5c:cf:1b:ca:ad:
66:10:7d:9b:95:b8:d0:c1:b4:06:80:dc:7e:0f:2c:
75:78:21:01:4b:ad:56:1b:3e:ec:09:8e:8e:77:36:
29:8e:e9:b4:c1:94:46:dd:de:4f:e6:e0:be:45:64:
0a:87:a6:dc:0b:04:ab:4b:0e:0a:41:60:81:01:29:
c1:ac:7a:45:67:44:11:4f:9b:af:69:97:d9:26:30:
40:70:5e:db:4b:fd:22:bd:29:c9:f0:ea:4b:63:4d:
f5:c5:09:5b:7b:94:b3:75:ec:76:fe:32:27:3f:b5:
18:9e:23:db:6a:f9:f4:d1:69:ee:e5:bd:78:8a:5f:
cc:53:01:2c:31:fb:5a:6e:d5:56:f0:e9:dc:2f:d6:
8e:4e:bd:77:e7:39:dc:a1:cb:0f:c9:8e:04:8d:c2:
1f:e4:77:aa:12:21:a8:73:cc:3d:10:e2:32:2c:6e:
54:c9:37:4c:13:87:21:06:c9:c9:3a:bf:f3:a7:30:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.232.0/24
IPv6:
2a11:7f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210670
Signature Algorithm: sha256WithRSAEncryption
8b:48:0f:44:d2:27:1f:14:b1:d7:ae:3d:a0:67:12:b5:4f:58:
fe:90:c3:1f:10:b4:3b:9b:62:96:ca:15:cb:7e:8b:72:af:67:
64:df:a2:2e:37:73:51:28:58:c5:1c:a8:d1:ba:fc:bc:93:8a:
04:32:c5:83:9b:28:52:70:8e:76:47:fd:82:8e:c4:2d:7d:2d:
48:f2:e5:1d:49:b1:2e:50:75:ef:28:14:45:da:e6:6e:eb:1b:
1c:da:0a:23:f1:34:32:b2:69:e3:b5:49:51:6d:cd:71:f9:4d:
75:65:06:82:6b:32:5c:f1:33:ef:ad:8e:7c:eb:06:1a:fd:0f:
fb:6b:13:ca:11:c0:c3:5e:7c:9e:57:1c:47:a8:f6:14:39:4f:
82:f8:cb:02:b6:20:15:62:a0:21:54:07:43:52:93:20:fb:2b:
96:64:f6:e5:df:1d:e2:a0:df:01:dd:08:4e:66:83:c5:65:6f:
a2:3b:a8:c2:08:ca:69:3d:33:3e:92:e1:69:9a:ef:75:20:f6:
97:d2:24:a8:58:17:c2:ed:03:3c:53:21:15:26:36:f5:11:f9:
70:b7:d9:cb:7d:5b:39:6b:28:84:45:ed:6f:f0:9b:67:d3:16:
e7:9b:b9:f5:ca:4e:6d:17:20:97:4e:13:c7:18:86:98:02:ae:
0c:c2:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:26 2025 by rpki-client