Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer (raw, json)
Hash identifier: Zz+xRZZr6bciwmeeDvc0mnNOpyHY1fgQ6RzjctKwpWo=
Subject key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC464F184267C47FD15F288142218D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202553
AS: 211636
IP: 2001:67c:262c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:4f:18:42:67:c4:7f:d1:5f:28:81:42:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:de:3f:3c:6c:a8:2b:7b:fd:1c:87:46:4e:
0c:32:57:92:8d:6d:b5:91:3b:24:ef:41:50:01:4b:
5b:52:c6:16:87:9f:48:0b:a0:83:23:15:8c:9a:13:
3e:07:41:51:df:e1:a1:d8:72:b4:ff:53:7f:b6:e8:
d2:a7:c3:1b:6e:70:c4:18:e4:5e:4b:6e:1a:49:05:
37:c8:1d:5c:de:6a:d9:8f:86:3f:b6:90:c3:2c:48:
ab:af:17:08:66:80:5f:e3:79:ee:95:3a:f7:29:7c:
29:f8:0d:d6:a9:65:99:a3:d4:5d:f7:7b:0d:90:8e:
e1:e0:c4:fc:6b:5b:14:4e:ba:65:8b:32:38:03:33:
7e:98:27:91:55:7c:a5:4e:42:9a:2c:7d:24:c3:33:
b0:70:64:98:72:a4:94:0a:03:70:a5:ac:f2:ad:53:
5a:2f:df:b8:48:d4:be:35:93:dc:28:d8:01:67:ed:
cc:3b:a5:b1:6a:5e:71:31:25:ae:e9:de:48:05:8f:
d7:ff:0f:c3:6a:24:e1:20:58:57:77:77:a8:d9:03:
bc:fd:61:e8:b0:53:e6:2b:a3:5b:db:4d:cf:a8:8d:
95:21:6d:11:96:34:ca:b2:70:ce:2a:e8:aa:f8:c7:
2f:9c:19:03:42:ec:40:7a:85:fd:5b:b6:e5:30:93:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:262c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202553
211636
Signature Algorithm: sha256WithRSAEncryption
96:79:e8:53:f0:dd:2e:dd:bf:b3:4c:57:fe:98:f6:23:c7:e1:
24:a7:6e:dd:b6:99:70:f6:f2:e1:af:09:c2:a3:77:b6:26:b1:
a6:fc:ee:5d:57:c0:e2:e6:69:ae:b0:cb:ff:2e:1b:4c:36:00:
49:22:9f:18:0f:d7:52:1e:65:f2:73:88:79:54:06:35:83:ad:
60:03:20:cb:f6:58:bf:ab:79:51:54:e1:fc:5a:bc:df:92:ee:
60:8f:3a:b2:5d:d7:ac:7b:da:b3:8c:c1:9a:ec:be:58:68:da:
28:f2:7a:06:5d:10:ff:95:92:80:5a:b3:6f:67:6d:e5:d3:46:
e3:91:e0:af:b1:d3:61:4d:58:9a:eb:76:27:dc:27:a1:2b:93:
45:b0:c0:5c:7c:e1:16:0a:5e:5d:b4:36:a6:19:f1:03:8b:45:
54:2b:d3:88:a3:d7:70:46:da:57:30:1e:fc:2a:b9:af:18:80:
6e:1b:c3:6f:4f:e1:bd:f6:72:57:a0:a3:ea:fb:97:85:77:1e:
23:d0:61:d2:81:81:30:c9:2d:29:e3:0b:90:94:1a:f3:37:30:
57:e4:09:e5:12:42:17:58:4b:84:ae:8a:e6:8e:3e:32:7c:b0:
e4:01:93:ef:27:63:f1:13:bd:c7:7b:b6:5b:e4:c4:fa:fb:19:
95:7f:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:34 2025 by rpki-client