Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer (raw, json)
Hash identifier: vJXaz7RA5gOVtW73TLaiP4dKPc2rT53Nkj9q2xQdDbo=
Subject key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444A30503F60B94A2E0483E5B1F4FA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197805
IP: 193.142.19.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a3:05:03:f6:0b:94:a2:e0:48:3e:5b:1f:4f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:41:f7:32:38:7c:07:5d:95:07:af:6f:cf:
6b:a3:7e:9f:ea:88:fb:18:9a:ee:ac:88:f2:cc:03:
16:c9:0d:a3:94:7f:59:fd:44:30:94:d6:97:98:f3:
25:d7:d9:b1:16:bb:8c:d5:a6:d0:10:87:74:16:4a:
49:9c:91:ad:3f:e8:e2:0f:ab:de:5f:0d:2a:e3:1e:
26:ac:cf:93:c4:13:92:d8:6b:e6:e0:b2:6d:a6:e6:
31:35:66:96:c7:b0:68:30:18:24:e0:7a:84:42:8b:
ed:ac:30:0a:2d:e7:ec:88:f8:ae:10:09:d4:e8:bc:
b9:b9:64:ad:d4:8a:61:4c:d5:21:e8:1c:b2:80:b7:
12:b7:78:a7:18:14:04:e6:d8:e3:97:0a:58:c4:9b:
7f:60:ad:ad:e0:16:77:31:a8:c2:4e:82:0a:a8:d1:
24:c1:8d:25:41:91:d9:f2:26:88:c0:86:45:58:05:
80:d3:0b:39:a6:13:91:05:eb:ae:e1:24:f5:3a:b6:
a6:91:04:e6:b4:df:fc:31:30:d3:11:f2:7a:b3:32:
6e:25:e4:c0:49:3e:96:d3:ec:d5:1c:64:c2:f1:c9:
42:fd:b7:b3:ab:c7:96:f2:ce:99:d5:64:58:f3:9b:
72:fc:10:c9:e6:81:c2:ef:33:25:ea:c4:9e:31:f8:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.19.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197805
Signature Algorithm: sha256WithRSAEncryption
ab:01:d9:9d:08:d1:a9:08:7e:f5:a4:78:2a:c0:34:b1:b2:07:
f8:ee:cd:72:9f:3d:9b:8f:05:da:41:d6:84:55:a1:10:6c:4e:
cf:f5:c3:57:97:bd:dd:a2:36:16:df:69:3e:f4:2c:b3:ea:43:
5b:65:3f:5c:13:f3:79:e0:33:f8:3b:4c:ba:4c:c4:de:4e:12:
db:4a:e8:f5:9c:a8:ff:c5:c7:51:86:3c:99:13:04:e6:97:aa:
58:6a:1b:27:24:b6:5c:e0:af:b8:c3:07:4b:b2:b3:2e:cb:de:
26:27:70:48:9e:44:c8:44:76:59:69:1c:9d:59:6b:05:dd:5c:
93:5d:1c:de:7f:15:38:83:ea:cd:33:4e:7a:43:c5:a0:84:ef:
65:6c:13:7f:68:70:c3:2b:16:3c:2d:fc:42:7d:46:59:67:27:
b8:f8:8e:f5:e6:73:29:27:ea:9e:e9:79:4d:02:bc:7a:0c:7b:
ed:81:f3:61:ba:72:c0:25:5e:d5:d4:85:6b:bb:bb:69:41:91:
69:0f:f8:01:77:9d:22:a9:0e:c2:55:ed:a8:41:f8:b2:9b:38:
ab:46:95:e2:39:f2:d4:c9:fd:0b:fe:c7:0f:33:58:a5:84:e6:
1c:10:40:1e:da:bd:c3:00:9a:98:3e:fe:76:69:64:a8:b0:c6:
4f:34:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:51 2025 by rpki-client