Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer (raw, json)
Hash identifier: KOdKwYt13sB9os4Qoa6TDwMvaYC+EbwYVRApPkcM14Q=
Subject key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D657171BB80BB6BDB41783147675C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213658
IP: 2a14:7bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:17:1b:b8:0b:b6:bd:b4:17:83:14:76:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:0f:03:e2:bc:8f:cb:bb:d6:ea:37:12:4a:
3c:88:a7:21:54:f7:bd:c6:7e:82:2e:00:6a:35:bf:
48:de:c5:66:2c:5d:dd:08:e4:f5:57:26:df:19:b1:
06:f8:7a:fc:75:38:5f:fd:18:6c:df:15:83:ad:39:
7b:38:db:1e:e3:81:43:90:d3:a0:cb:ef:c4:44:b6:
ef:38:0d:cf:10:a8:67:a1:93:4c:c0:96:39:6f:b0:
9f:8c:ac:31:70:32:91:0b:b8:9f:c8:4c:b3:5c:98:
33:bd:24:b4:f7:f3:0f:48:19:64:75:15:9f:e2:40:
4f:95:f8:73:66:c1:d0:0e:c2:96:79:b6:95:f6:ec:
2b:42:91:e2:2f:03:c5:29:f9:61:1e:27:b6:82:51:
96:2b:88:d7:f9:d0:de:e6:97:9d:06:3d:b4:ab:da:
24:50:8b:c9:ff:d9:70:0a:6c:67:b0:88:75:8b:06:
3a:b9:0d:20:e4:52:36:3f:b2:5b:54:db:07:2c:49:
0f:9b:e9:4f:84:64:27:b5:7f:27:7d:f7:a7:bf:b8:
47:cf:73:2c:75:b3:3f:c9:90:70:f7:82:95:f4:76:
c5:d5:ae:f8:86:fe:41:a3:ad:b3:5e:28:eb:7f:0f:
4f:89:18:f0:9e:b1:32:19:09:3f:40:f1:90:d2:52:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213658
Signature Algorithm: sha256WithRSAEncryption
1e:39:28:e4:bb:43:82:13:d4:78:0c:e2:09:ae:92:25:53:7f:
4c:12:bc:3b:54:3f:56:bd:31:5f:07:73:7c:ab:0d:82:8d:00:
42:6c:30:ff:bc:aa:ac:67:fe:52:d9:f2:0b:1a:5e:4f:c1:d8:
75:ed:a6:d2:0e:72:ea:9d:a6:36:1e:56:a9:f8:7a:da:5f:5f:
d4:5b:d4:57:3a:4d:81:1a:72:22:3b:c2:e1:c8:56:18:8f:6c:
46:fa:8b:4c:2c:d2:f1:79:a1:31:ba:fb:67:cd:d7:26:dd:a1:
99:fe:64:0e:cc:10:ed:9f:a9:ff:31:0d:71:db:02:55:45:9b:
c2:cd:55:4a:b7:ce:60:58:36:06:a2:ff:fa:42:ce:16:57:ed:
45:d8:f8:2a:dd:c6:d0:4b:f7:2b:7b:f4:89:c3:1e:b3:d9:5a:
7b:87:90:17:d9:97:4a:7b:be:e6:8c:cc:8c:f9:43:d4:37:62:
a1:08:8c:de:7e:f0:8e:cb:31:2f:6d:2a:93:dd:5a:b2:21:24:
ae:1c:5f:a1:cf:93:ac:38:4e:ce:e7:82:35:6b:bd:22:5e:c2:
b1:6b:8f:9b:96:7a:3c:5f:a1:a6:b4:3c:e9:35:31:d0:16:f4:
61:fd:11:fc:12:c5:e6:aa:83:e7:d9:00:0c:60:fe:89:6f:32:
2c:b9:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:42:12 2025 by rpki-client