Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer (raw, json)
Hash identifier: tuwjupdFmUCaghcnAAfFNMfEJCc7cUEXwz2QkOmgG6M=
Subject key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA55030AC3779D81834D9B0E29F4B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199839
AS: 212389
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:03:0a:c3:77:9d:81:83:4d:9b:0e:29:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:f0:4a:ae:b3:6a:d3:4b:6a:7c:14:f5:8a:
be:23:66:74:1f:ce:d4:f2:d5:05:a9:ca:e7:af:67:
15:ec:98:f4:5d:a5:1f:4a:da:e8:3e:e6:68:ac:01:
7a:12:1c:d6:49:66:fe:c2:dc:d4:16:c9:ac:61:c2:
35:37:42:35:27:63:43:6f:f3:c2:01:1e:e2:0d:fb:
ea:cf:72:62:de:a2:07:dd:7c:fa:0e:bd:ac:6b:f0:
34:65:c8:95:0d:14:89:c1:0c:2f:a3:7e:bb:d1:98:
f2:a3:e6:9b:c3:c0:f5:c4:8c:0b:11:64:e7:5b:b2:
65:ec:c5:c6:1b:13:08:85:9a:e3:ac:b0:e8:6f:9f:
e6:fb:2f:48:96:a0:53:5d:14:aa:ba:ad:ba:25:7a:
d8:3e:42:3e:fb:a3:71:34:22:d0:cc:79:56:19:d7:
97:90:18:53:59:e2:99:8b:7d:75:6d:12:da:27:9e:
4f:1e:7a:f5:29:bd:53:14:bf:f6:30:40:e5:c9:fb:
67:20:fc:86:27:9b:4d:0c:32:9a:75:22:e7:05:90:
79:83:96:c0:d6:44:3d:c6:a1:72:47:ed:26:4f:3a:
c6:ab:3c:2f:4b:b9:4b:f6:e7:cb:ac:e3:3e:44:73:
d1:7a:01:e7:58:4f:db:ee:92:57:6c:d1:b0:80:54:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199839
212389
Signature Algorithm: sha256WithRSAEncryption
2d:73:0e:04:10:c1:06:3f:87:30:47:7a:ed:49:65:38:af:c3:
e6:b0:df:a7:6d:56:c2:76:75:aa:0e:be:8f:fa:92:61:5a:fd:
d5:f5:3d:fb:1d:36:a6:43:8b:62:8b:7d:a3:dd:2f:dc:7a:8f:
b3:7c:be:60:d6:23:ba:34:03:aa:71:60:37:56:19:de:e4:90:
20:4d:9f:53:75:cf:f0:d5:bf:6f:ee:25:39:f3:7a:01:cf:15:
c5:c3:8c:60:ce:0d:bb:1f:b3:c2:3b:b4:a8:05:e7:74:1f:80:
0e:36:98:a1:37:c2:cd:ad:48:87:a2:0d:47:a2:6a:3f:3d:2f:
92:39:97:0d:08:18:e4:85:0e:fa:65:58:ad:03:af:d1:5e:1a:
3c:12:9b:6e:6d:37:8a:2e:13:df:17:59:fc:36:41:12:c6:3c:
d2:a9:80:60:b3:c0:f0:eb:fb:20:a8:7f:b4:2d:4b:9a:54:b2:
86:be:9b:d9:b3:19:e9:ba:ab:1e:9f:63:f8:d3:a9:16:08:a9:
af:b2:4e:c8:fd:2a:6d:f9:b7:bf:6c:76:ba:b8:2b:1c:96:2f:
ca:40:4d:13:f7:68:7e:97:fd:f3:36:f9:38:84:67:d9:d1:5c:
9d:5a:a7:ab:1c:3f:f9:7b:76:2e:f6:9c:9d:ec:58:be:91:91:
6b:bd:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:01:15 2025 by rpki-client