Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
File: o6_aacqxv_Ujyj71dLh8oTD96iw.cer (raw, json)
Hash identifier: ZR20yip39gLNvU4snm3AagHvufameSVUyaBFr6UfURk=
Subject key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC47D3658B510050A95788F8B793D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212357
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:47:d3:65:8b:51:00:50:a9:57:88:f8:b7:93:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:98:a6:17:1e:83:eb:dc:83:2e:67:fd:cc:
ba:03:d9:b6:07:c1:3b:db:30:75:9b:ad:23:e6:34:
92:24:16:81:1c:ac:64:04:67:55:ae:ad:72:ba:65:
04:95:18:26:0e:cb:98:27:34:94:42:db:55:7e:a2:
25:a0:50:74:4e:e5:71:c5:67:90:a4:88:8b:1f:db:
f0:e7:4c:7d:92:64:90:f5:3f:c6:d5:36:cb:d9:5e:
f7:dc:fe:97:0a:54:a4:b1:95:cf:45:dc:ff:f3:99:
dd:91:38:2e:86:51:11:49:ed:15:c5:c0:dd:f5:2a:
f9:f6:a1:ba:b3:34:f5:7d:fb:cd:92:d2:43:0b:95:
43:8d:d5:b3:b3:2e:4d:cc:2f:5d:1e:ad:b3:7c:76:
65:3a:a5:3f:75:09:3e:73:96:9d:ae:5d:0b:84:d3:
78:e7:4f:55:21:f3:b4:fb:46:bf:bb:cc:12:61:a9:
f2:23:0d:ce:4d:75:2e:17:5f:1c:01:0f:51:8c:d1:
4a:19:60:84:96:da:1f:94:72:ec:1e:b9:8f:94:ca:
15:0b:9f:cf:90:d4:3d:bb:fc:06:de:2e:7d:4e:d1:
e1:7e:07:e9:53:c1:d0:3e:7f:3c:ca:bf:7f:2a:85:
7f:ed:fe:58:8a:40:ea:b7:3d:ae:4d:e6:d6:33:76:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212357
Signature Algorithm: sha256WithRSAEncryption
58:7b:4d:bb:ab:0c:8e:08:e2:98:45:c5:03:4d:2b:2c:a1:91:
bc:91:17:cd:cb:6b:52:2c:25:6c:5b:c2:d8:2c:f7:cf:77:7b:
7e:37:06:7b:18:4e:ca:e2:52:f9:38:22:da:8f:50:4c:9f:ea:
9a:bc:d5:b7:ed:04:70:62:7e:a1:97:06:14:f4:25:57:3e:88:
de:c8:e3:05:ce:08:af:eb:40:25:ea:f4:15:f7:98:bb:de:a3:
dd:13:1a:fb:19:89:e7:18:a7:b9:b5:f2:6d:fc:1c:7a:41:9d:
8d:43:fe:6f:87:65:d2:5c:4b:c9:d1:96:03:27:2a:10:57:a6:
f4:06:f7:75:72:ef:24:59:c1:85:3c:d7:a8:ee:94:fc:ae:7e:
83:36:93:7c:32:d9:92:c4:65:a9:8a:6a:b4:16:b1:c2:11:51:
16:7b:58:96:de:aa:ae:1c:cf:fd:86:25:e2:33:3e:bd:d4:c9:
0e:6c:27:93:95:53:de:18:56:4f:e7:d7:a7:bd:ef:27:26:59:
27:13:b0:53:7c:02:24:7a:ad:e6:11:f6:14:11:52:25:2e:19:
a7:4b:d0:cf:8b:f8:4a:9b:bc:e4:d5:4f:c6:28:64:97:46:44:
75:a1:f8:dc:7b:45:85:d5:3c:bb:c8:f2:b2:5a:b5:9e:db:98:
95:65:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:48 2025 by rpki-client