Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
File: 5LqY_D6-gGx4Llifr1KVwyWSEqg.cer (raw, json)
Hash identifier: ftaoit2HDLP2MS8T0ZoSFbSrYO2PBXwyaoCPu7yrXHM=
Subject key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C9E1A726F085FDD7B61B7FC6E6E16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215131
IP: 2001:67c:e5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9e:1a:72:6f:08:5f:dd:7b:61:b7:fc:6e:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:af:3f:37:aa:6b:f9:bc:3c:40:1f:af:31:
f2:5d:e7:20:b6:2b:8a:cb:df:6c:cf:0c:05:60:9f:
c9:eb:fb:6e:e6:8b:ac:7f:18:51:6b:81:c0:5e:c5:
ce:43:1d:a6:f7:2b:25:f1:93:14:cb:72:63:e3:26:
68:d5:23:a8:db:27:c5:14:f2:ad:67:8f:3f:f1:be:
47:db:1f:33:f7:8c:e1:91:1b:f4:43:87:d4:c9:57:
f6:c8:99:c5:b5:2a:1e:ad:65:3f:d4:aa:ec:a5:db:
f4:ba:3c:d3:57:61:95:d3:43:e1:fd:4a:31:b7:9b:
46:96:b4:64:0e:8c:f3:c8:4a:df:3c:65:1c:81:e3:
4c:fb:65:fc:7c:1a:49:7f:1d:ec:86:34:2c:b4:cf:
be:45:91:2c:f1:24:04:41:76:b6:d3:e8:55:71:71:
bd:6c:ab:f0:bd:47:32:e0:30:9d:7b:8e:46:43:83:
e5:ae:cd:dd:11:dd:c0:7a:16:e5:3a:97:b3:96:bb:
43:7a:09:60:80:93:8c:bb:25:17:ab:ab:eb:28:3c:
5b:a3:08:83:0a:01:af:87:af:aa:1a:b4:7f:4f:3c:
d6:36:60:f9:18:7e:be:8a:75:6c:b5:01:57:99:46:
cd:5c:07:47:5b:2c:ca:ee:50:a4:eb:ef:21:ff:3d:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215131
Signature Algorithm: sha256WithRSAEncryption
48:4f:cb:60:d6:1e:44:e0:e4:b5:5c:fb:0b:88:74:58:87:ff:
30:4d:97:47:51:7f:39:28:5f:04:ef:ff:bc:ce:10:17:23:36:
27:67:03:93:d5:f2:d9:87:cb:a1:a1:9a:2e:ba:c4:74:19:24:
14:c1:e8:de:bb:aa:ac:d6:36:b6:7c:3a:7a:a7:34:d8:5f:72:
31:b8:7a:1b:0a:99:a7:cd:9e:5e:e4:15:3f:b1:d3:06:39:26:
ad:7d:85:46:b4:07:46:ce:7e:d5:5f:e4:a7:06:66:a9:5c:dd:
3b:2c:d0:24:96:05:29:56:f7:30:85:2e:02:92:2f:cd:43:e4:
2e:13:8c:7f:9c:17:0a:0c:86:ab:e4:9b:39:33:59:4d:be:61:
57:43:d7:42:b5:96:86:e1:b4:f3:36:36:70:e9:43:7f:f9:ff:
1e:2a:92:32:0b:03:2d:fc:7e:4f:7b:b5:f1:eb:ce:47:1e:d5:
b7:69:9b:af:a0:6e:34:cb:94:8a:75:a7:51:90:92:9f:cb:04:
f8:a8:b5:0e:25:a6:f1:2a:c5:90:99:e4:14:17:5a:a7:5e:b4:
06:8d:06:f8:81:26:6a:ef:49:76:94:59:64:1a:72:a9:83:9d:
54:b4:d9:26:b2:cd:b5:22:4e:5f:1c:82:f9:66:f1:4f:b7:45:
a3:e1:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:28:15 2025 by rpki-client