Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
File: 6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer (raw, json)
Hash identifier: E9xMAmPINeUVIjhHDIDRaYW01GnTeBapOe1LsP6BR2U=
Subject key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206806ADA5494CE880B710074F1EC644
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208453
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:ad:a5:49:4c:e8:80:b7:10:07:4f:1e:c6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:f7:a2:f3:17:a7:b7:21:88:26:c3:05:c2:
34:75:d2:67:c8:32:5b:c3:32:73:f7:c4:97:d9:b6:
24:71:50:75:fa:63:0c:3e:b5:a0:30:d1:86:3e:1d:
5d:8a:26:6d:80:b3:19:44:41:54:f1:cd:0e:2d:8d:
95:a5:7e:2f:07:c5:27:65:6e:5f:4b:ab:c7:b7:a6:
bd:95:c8:3b:e4:83:71:2b:9f:dc:8d:45:39:1c:7f:
4a:3b:20:68:ce:e2:66:8a:1d:dd:ca:31:45:03:9e:
b2:77:cf:70:a1:94:75:e4:8a:2d:31:35:54:00:ce:
17:83:a7:8d:44:07:03:ea:a6:cc:11:fb:dd:7e:01:
01:ed:0a:cb:27:86:f4:e6:93:e1:b9:58:21:50:13:
24:d2:57:ce:84:f9:8a:3d:ce:9f:c5:e6:c2:a0:64:
0b:a1:0f:ce:df:dd:d3:1f:5a:2f:cb:f4:f6:e9:31:
67:e6:97:e4:be:8b:a1:46:e0:1a:05:22:fa:dd:ec:
2d:f0:cb:90:e9:a4:d8:06:f7:9f:cb:d2:ca:ce:0d:
43:c3:f3:c6:3b:f1:bf:62:6d:06:41:41:16:81:18:
04:3c:bb:e9:80:0d:4e:74:e4:37:7e:74:ab:ff:15:
76:d6:b7:c5:db:39:73:d0:ec:39:f2:2c:ba:c4:ea:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208453
Signature Algorithm: sha256WithRSAEncryption
07:2e:5a:b8:ef:6e:15:54:4c:0e:f8:67:c0:df:e2:ab:d1:71:
25:e2:b3:3b:67:70:66:a3:38:b2:15:d1:50:42:a6:07:f0:c1:
36:8b:7a:a5:4b:ae:98:b9:57:a2:ea:10:87:ed:3f:f8:d9:df:
c9:90:20:16:60:a2:49:1d:9a:bd:01:36:4f:7d:64:b4:38:25:
d0:fb:ba:47:b2:6c:52:93:6b:84:5a:61:55:f5:ec:2e:4f:b2:
64:70:10:42:8d:78:60:0c:da:9e:f2:32:f3:d0:e2:19:d9:f4:
be:d2:fb:c1:bc:37:e1:f2:97:0f:2f:f6:9e:30:c0:15:28:2d:
34:c1:2a:47:bf:91:5d:45:1d:46:f5:ba:5f:40:1e:a2:a6:81:
8c:3e:1c:ec:f1:fe:e9:3a:12:cc:e1:b9:c8:3b:37:93:32:4c:
70:af:56:aa:55:4c:f1:a9:68:91:ee:82:36:64:49:b3:1d:71:
ca:06:99:4f:73:53:73:e9:c4:04:67:73:ee:55:97:d6:50:ab:
1d:c9:1c:3b:28:f0:98:a2:c1:64:bb:f4:03:df:87:2d:e9:ad:
ba:8f:95:28:69:a3:87:6e:47:3b:8a:45:16:ea:1b:85:2d:32:
18:26:6b:e5:4f:c1:70:d6:fb:87:e5:8d:84:1a:e5:36:40:3d:
f7:4f:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:48:27 2025 by rpki-client