Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
File: 2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer (raw, json)
Hash identifier: f+MypwqJdyXmZ2mZW+MnF9M0bjVXziy8lNFk7gE5Vzw=
Subject key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8BFF17759F232A2E08794147910682
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:ff:17:75:9f:23:2a:2e:08:79:41:47:91:06:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:fb:3a:04:79:a2:a4:01:57:5b:d8:11:c5:
91:f9:7c:cd:46:aa:63:bb:8f:bf:5b:d5:38:43:e0:
a4:c5:09:16:11:cd:6a:a1:10:3e:56:bf:ec:71:24:
5e:28:b8:a2:ea:1f:20:1a:89:76:bf:e0:0b:52:8e:
5f:0d:98:be:f7:54:e7:e2:94:82:f6:50:d2:9b:86:
c7:19:3e:a6:a0:43:34:f7:1c:e0:b7:a6:b5:95:55:
74:5c:3e:52:15:41:e9:f7:d3:bd:5a:53:66:26:8d:
90:0d:91:2d:21:04:95:10:8e:8c:ac:84:ca:92:3b:
62:0d:5f:4a:a6:6a:51:3a:c9:8f:65:27:a9:93:bb:
1a:2f:fb:9d:57:37:2f:1f:42:63:83:4a:d9:fb:c7:
f0:8a:57:e7:a2:0c:9c:17:65:47:ea:30:6e:0f:69:
63:6f:68:b2:cb:58:52:7a:32:30:d0:ca:37:a8:a2:
8c:d1:fa:2c:1b:56:e3:43:e3:b4:9e:f4:a9:e9:f5:
fe:c9:6d:b4:64:17:e2:c6:bf:9a:15:d4:33:bb:cd:
33:8d:62:e0:f8:ee:d2:c9:c4:31:67:61:71:5b:92:
40:9c:08:78:cf:e7:ae:7a:c3:01:9b:99:62:13:d2:
11:52:91:49:83:b6:77:eb:94:30:d5:ff:98:4f:a8:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215828
Signature Algorithm: sha256WithRSAEncryption
a3:ce:34:e8:bd:2e:de:c2:db:4f:76:58:b3:6d:78:d7:70:a3:
ad:34:0c:58:cf:41:f3:b0:56:da:b4:b3:c2:c1:f3:d4:10:c5:
00:ef:58:c3:c8:e6:5f:e0:32:2b:63:ab:fc:b7:74:31:48:dc:
04:af:f8:21:97:f9:50:cd:6c:4d:67:ff:e6:fa:81:61:b2:6f:
b6:19:ad:91:26:5d:1a:ae:d5:75:41:db:1e:cb:03:72:17:ff:
99:40:e4:0f:9f:9a:79:23:5e:2f:84:56:d1:58:cd:30:d8:6e:
b0:3f:61:cd:3b:ed:20:b3:ed:36:fb:2b:77:07:5c:1e:cf:93:
6f:a8:43:49:6e:04:fa:2b:10:17:16:1b:ea:3c:e4:04:c7:ad:
f1:52:f6:71:40:b3:e1:82:70:5f:fd:ff:28:6b:91:09:ba:d4:
63:58:5b:1b:1a:27:02:52:4a:8b:fa:6a:c2:d9:55:81:b1:b3:
c3:74:a4:d4:a9:7d:9a:f3:69:9b:78:84:5b:d9:69:6e:90:35:
65:15:34:10:b5:a4:44:e0:fb:0e:1e:c7:85:6e:26:34:81:81:
c5:26:93:bf:1e:3a:37:dd:0d:59:f0:dc:21:50:f4:35:68:83:
0d:86:3b:02:97:0c:76:f1:56:8d:68:e4:fa:f0:ee:e3:f4:9b:
2d:e4:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:58 2025 by rpki-client