Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer (raw, json)
Hash identifier: lio/nsmbqeG+ZysxvPU6xYUI326JtmGwyEFJDUk9Puk=
Subject key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5DDFD7A99E436B838354861513FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56654
AS: 60088
IP: 77.81.68.0/22
IP: 85.204.164.0/22
IP: 89.39.176.0/22
IP: 94.24.111.0/24
IP: 185.85.176.0/21
IP: 188.208.128.0/22
IP: 188.214.244.0 -- 188.214.255.255
IP: 2a04:f980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5d:df:d7:a9:9e:43:6b:83:83:54:86:15:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:fe:c8:6f:99:7b:4a:88:1d:b6:12:c7:06:
82:76:91:18:50:bc:34:f8:67:17:e5:9f:93:29:60:
5b:fd:f1:f3:b7:f1:01:78:46:02:dc:a3:42:54:23:
bd:48:da:84:19:02:97:bc:bb:df:ed:64:41:fc:85:
9f:46:fb:96:1d:c5:14:85:2c:93:dd:83:a8:cc:3b:
d5:f8:f1:df:6f:6f:e0:50:4f:3b:db:fe:20:8c:dc:
8c:df:fd:9d:63:aa:32:14:26:32:cc:b6:7e:1a:a8:
30:55:ce:51:2f:ef:7e:57:ab:10:ba:a4:6e:00:48:
ba:a9:98:32:af:52:92:73:9c:66:99:8c:53:ff:6c:
50:c4:14:37:53:36:45:b5:74:f5:a0:7e:0c:e6:98:
32:58:c6:51:20:e6:56:9c:a6:1c:84:1c:05:50:71:
5b:8e:69:e7:02:68:0e:eb:a3:31:38:57:72:70:c8:
27:6f:8f:44:60:c2:56:30:67:b8:a8:15:3f:64:49:
f5:e1:24:85:c5:34:55:df:22:c0:22:bc:dd:81:ad:
c7:d9:b6:52:d9:87:37:93:65:aa:75:68:10:e4:d4:
6b:5e:6b:91:78:d5:81:7b:1f:bf:af:5b:40:5e:10:
de:3d:c1:d7:dc:fa:d5:2c:f3:61:d7:2e:2b:4d:ca:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.68.0/22
85.204.164.0/22
89.39.176.0/22
94.24.111.0/24
185.85.176.0/21
188.208.128.0/22
188.214.244.0-188.214.255.255
IPv6:
2a04:f980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56654
60088
Signature Algorithm: sha256WithRSAEncryption
64:86:a1:79:71:f7:51:93:31:32:cc:d7:b2:22:45:69:4f:56:
73:75:f3:3e:96:98:1b:4b:4b:30:98:3d:58:dd:a3:aa:92:55:
a8:1a:11:22:78:5a:23:58:28:d0:f1:61:26:5a:bc:ab:ae:1c:
70:d7:56:de:a1:62:56:1b:7d:50:38:c6:1f:73:4f:53:ac:87:
c1:b9:b4:82:1c:13:24:4e:42:ac:63:f5:2a:73:6e:2e:46:7b:
72:05:96:e9:39:ec:6b:5c:2c:f4:69:97:db:09:e8:6d:36:1f:
75:f3:0f:3f:6d:e3:8d:c5:38:ab:d0:30:b0:5a:cb:57:c8:85:
de:78:75:51:2b:69:33:4f:5d:d6:8a:be:0a:3d:c7:15:18:a6:
32:fa:ec:78:23:51:66:14:63:ab:a3:3d:53:a4:85:86:bf:a8:
4a:51:52:52:6e:17:2c:65:59:cd:3e:b3:6a:f6:02:bc:a2:b5:
93:82:82:76:ac:c4:c0:67:2b:6f:58:5c:95:3b:28:aa:86:a8:
32:73:5f:99:98:5b:86:51:78:2b:ae:4a:35:d7:ba:bf:6e:e7:
44:57:f0:9c:3d:9b:fa:bd:0e:53:d1:a5:47:eb:14:95:25:ea:
68:93:8c:f2:f1:a2:b7:be:e6:fc:0e:72:81:4a:4d:d5:f2:59:
01:bf:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:37 2025 by rpki-client