Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
File: 7UHARIMai6EJ1CYpau5lONy1S2M.cer (raw, json)
Hash identifier: x8KH3eCWd/7JKx+GYB6BNnrpMPfnhGDJMjEZFzTkJ7I=
Subject key identifier: ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D74F5BED77B6BCF1B856B4FDDD43B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48743
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4f:5b:ed:77:b6:bc:f1:b8:56:b4:fd:dd:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed41c044831a8ba109d426296aee6538dcb54b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:ac:fc:89:08:dd:f9:13:2b:0e:59:e2:25:
96:cb:5a:f9:6a:39:76:ac:d0:fd:8c:6e:46:2e:7b:
47:67:7c:49:78:6a:f7:6b:6b:37:12:8d:8e:c3:68:
12:30:bc:62:0a:35:83:9f:5a:c7:ea:49:d6:ce:f7:
79:28:01:70:8d:d6:5f:2c:4b:ef:d8:c5:fd:66:0c:
32:ca:64:5b:fa:62:23:1f:14:6f:37:cb:4c:36:14:
f7:07:f8:4d:06:13:87:29:9e:90:5e:b2:10:fd:da:
58:e9:48:d8:07:3a:1e:68:8a:48:88:79:be:5c:87:
fb:ec:81:03:2c:27:8b:e3:b0:f4:9b:7b:f1:e7:16:
e3:a5:0d:1e:1f:06:45:c3:d6:c7:3a:ac:1a:aa:07:
90:51:8b:ce:68:92:29:0d:fe:cd:02:14:02:7a:6a:
a4:30:a3:cd:31:93:7b:9e:d5:8d:26:c9:fd:d8:92:
4f:1b:ae:38:55:f0:a6:68:90:01:c0:1b:7f:94:ad:
0a:d6:b4:66:d3:f4:df:8a:8e:03:17:eb:c8:fb:e5:
44:f0:9f:41:d8:7c:d2:97:8a:e5:a0:5a:8f:ab:07:
2a:e8:51:06:74:43:77:da:10:c3:b4:b2:b6:cf:b7:
9d:57:bc:47:29:d1:4b:69:ee:5c:28:66:da:88:95:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48743
Signature Algorithm: sha256WithRSAEncryption
72:ba:09:06:a6:0b:00:35:0e:d3:a2:45:4d:7a:00:dd:44:3f:
c5:6b:b9:e0:a0:53:48:24:ce:f8:f3:b7:9a:f2:3b:f5:db:65:
09:ac:98:90:b7:2b:c6:0e:1b:af:3d:cd:bf:12:7c:93:58:c3:
9c:e1:5d:d7:0a:d0:0f:77:96:fe:c7:eb:9b:81:ea:74:e8:1c:
b0:22:d4:20:64:7d:8c:bd:62:a4:ad:fb:a8:96:23:06:42:cd:
16:a4:da:fe:6d:2b:1f:41:10:f0:08:76:51:82:da:3b:4d:f9:
bc:90:52:8a:25:8f:01:6f:ec:da:f2:ee:5a:a2:fb:6e:9b:61:
ea:f0:76:ae:ae:4e:2e:64:0d:0c:f9:b9:f2:d0:0b:34:c7:9d:
c9:9d:37:dc:81:0e:48:80:87:aa:a3:07:89:53:06:d3:a4:7b:
79:3e:5f:fa:bf:80:c6:65:a0:c3:a6:ee:a3:92:9d:9b:c9:8b:
1e:8d:61:f9:57:f2:84:d9:b7:be:29:2e:de:c2:40:0b:d7:96:
2c:a7:aa:fd:03:b6:13:76:39:24:42:55:91:ce:49:98:8b:ca:
88:de:4c:2a:c9:99:88:e0:b2:0d:3b:16:e0:db:ba:e6:8e:12:
cc:6c:a4:3f:85:44:d8:51:b3:8b:f3:b7:aa:09:3f:9a:c1:70:
54:f3:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:46 2025 by rpki-client