Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
File: 4skpXMHDGHbIVU6LYNxXPP6nyyY.cer (raw, json)
Hash identifier: 8vc//741sF9zcl3HNw1Q7VfDOxci/Zf6wuIO3g2YigI=
Subject key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420051DECE99432F6B0000DAE40283386
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:59:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215368
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:05:1d:ec:e9:94:32:f6:b0:00:0d:ae:40:28:33:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:59:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:7a:75:95:1d:46:d2:10:00:bc:dc:89:c7:
55:00:15:a9:0f:7c:01:55:10:29:ef:e5:cd:4d:c9:
2a:f6:82:0c:bb:bc:c3:27:ec:b3:d5:d8:65:bc:0e:
43:95:94:ba:40:29:fd:4c:f7:d1:0a:6d:ea:d5:34:
cd:e0:39:89:ff:9f:62:78:f2:06:8f:e2:e7:35:c2:
c2:ec:41:a7:1c:14:df:c0:5f:08:bb:e8:6e:c6:87:
9d:cd:c7:7a:7f:a3:a1:ab:53:32:8f:14:8b:3c:ee:
da:b6:b3:5b:2a:d1:b8:a5:b6:ff:bc:c4:86:09:05:
a0:64:9e:cf:f6:cc:17:86:ec:14:48:29:92:86:87:
87:2a:3d:9a:28:b2:ed:e1:94:9e:a7:e7:29:fe:72:
93:e0:6b:f5:5d:29:43:17:ad:15:92:8a:e2:f1:1e:
01:36:44:86:f6:c9:a9:b9:7d:1c:52:96:9e:24:ec:
22:a8:19:12:38:5f:27:5f:51:72:a4:6f:d0:49:e2:
6b:b8:ef:ee:4f:8d:0e:cb:39:a4:f4:2c:0a:7b:65:
f0:65:73:6b:e1:84:c3:c2:a0:0d:3d:c7:a1:06:6f:
11:19:05:9e:9f:ea:39:1b:5e:25:56:59:ca:12:6e:
24:13:7d:30:35:ea:24:ff:7c:56:2a:b6:3b:d2:e3:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215368
Signature Algorithm: sha256WithRSAEncryption
14:04:2f:fc:1c:01:bc:db:93:74:e8:87:e5:28:a1:ba:70:f1:
27:33:7c:a6:a4:36:37:d6:ae:26:a0:9f:56:fe:a8:93:14:90:
3f:fb:76:93:b2:21:71:38:f0:1c:38:77:37:ac:cc:14:60:9c:
2a:02:97:26:18:ab:9d:b5:d5:c9:9e:00:75:aa:28:64:93:42:
35:13:0e:67:b7:73:a3:e3:83:2e:54:55:9b:b0:86:94:07:7a:
f4:04:05:da:b6:37:40:6d:54:af:06:27:48:bc:28:8c:ae:19:
4f:77:14:c7:c7:3c:fd:45:f9:2a:b5:a6:3b:ab:d2:1a:9a:be:
1e:46:a3:ab:97:77:1c:f8:d2:ce:22:75:e5:5a:88:53:e7:7e:
db:64:96:47:1e:24:99:b5:0d:62:fe:de:c6:91:56:78:b3:96:
e9:74:04:a3:87:26:a8:9d:d9:dc:e3:dc:76:fb:a9:09:ee:64:
6b:08:58:7a:76:fd:b9:3a:5f:b2:e0:2b:7a:43:87:8d:a1:90:
1a:33:e9:23:9d:9f:e6:6e:de:f6:bb:6e:9e:7a:57:98:36:95:
f2:b8:68:c7:f6:2a:33:7d:95:5e:36:72:12:ca:f0:66:06:a5:
08:b5:c6:0d:19:00:6a:09:b8:fe:a9:38:63:d0:fe:97:51:d9:
8d:2b:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:42:55 2025 by rpki-client