Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer (raw, json)
Hash identifier: k/g9rKpQoqFc4qoTxLq+1VJQu0D4o4CBb9COyhgfqkk=
Subject key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D09BCBB2733F85D2F5952ED0AC92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211776
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d0:9b:cb:b2:73:3f:85:d2:f5:95:2e:d0:ac:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:82:40:fd:d4:6f:15:88:db:3a:36:99:a1:
ae:9a:43:b6:81:32:da:eb:c1:be:e1:da:e8:ae:74:
e0:89:15:91:ef:67:1e:d3:66:cb:eb:68:4a:6e:58:
57:a7:dd:d9:26:54:7b:02:88:8d:35:03:bd:46:20:
c0:fd:7c:16:87:91:d9:ae:4d:3a:cf:14:04:53:fb:
0b:e2:2d:0a:5e:0a:3a:be:9d:3d:94:cf:2a:f0:cb:
15:76:96:48:69:e7:5d:71:fc:71:97:02:12:aa:3b:
ec:3c:df:f3:c1:c8:51:50:d1:6a:0d:8d:77:ef:28:
6e:5c:53:db:8f:06:92:a9:18:2d:2b:38:e3:46:78:
d8:be:95:9b:87:ad:e1:32:97:e9:de:9c:76:fa:56:
58:1e:49:c9:bc:9b:3d:b3:37:a3:83:cb:38:02:20:
fd:b2:e8:b4:17:80:f3:7b:e6:6b:fe:4f:1b:b2:53:
5d:5a:b6:31:77:e5:1a:99:cf:5e:7f:8e:b3:00:14:
29:0f:cc:03:bb:76:94:88:7f:7a:24:e1:91:02:2c:
2f:3c:10:03:e4:d4:61:3b:7b:27:a5:26:ed:2c:fd:
3a:ce:db:a7:bb:ad:25:8a:0c:be:3c:f5:b5:b2:c8:
ed:d7:87:48:be:35:02:0e:c0:71:b2:99:a4:2d:b6:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211776
Signature Algorithm: sha256WithRSAEncryption
37:62:1e:41:9a:0b:2c:99:34:4c:1a:c8:6d:56:28:05:9f:e2:
c5:3c:0f:21:f9:fd:b0:d7:98:8b:70:6a:01:0f:98:42:9a:27:
45:64:d9:84:26:e7:c0:29:9d:c2:30:bd:4e:10:0a:ff:01:dd:
31:7d:3f:9a:92:7e:5b:f4:5f:c9:09:33:45:41:74:77:9a:b5:
c3:0e:59:c8:41:5f:09:7f:2a:df:43:43:d8:62:c6:ce:a0:c5:
25:d0:c4:b3:7f:bf:08:45:6f:58:18:21:1e:9a:b9:42:55:43:
91:70:d0:8e:3e:c8:a5:4e:e5:a4:c6:26:b8:54:16:d9:de:9d:
52:8e:70:44:67:19:df:ea:4f:6a:bd:7d:b3:d6:02:0b:cc:cb:
24:2c:41:90:13:84:f9:2d:15:2a:f2:18:42:38:70:57:ec:3a:
24:75:1d:d8:8b:ae:21:b2:86:6c:a7:65:08:63:5a:04:7e:b0:
98:4a:04:42:0c:56:de:76:ed:3f:27:93:a9:7f:7e:58:f4:50:
5a:9c:8f:36:16:c2:50:18:fa:10:df:01:fb:3a:af:4a:23:15:
09:8d:08:80:53:46:0b:c8:2e:49:86:70:f6:75:0a:c3:50:6b:
39:c0:10:3d:81:33:e9:d4:d8:24:af:bc:ea:f8:f0:fc:82:f0:
f1:c1:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:14:13 2025 by rpki-client