Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer (raw, json)
Hash identifier: cmlLLohJYq1cTG9YF/snOQfMH4dKv4gTmU2rm+9pgUQ=
Subject key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA001FD0AE70696D345C54F0ED660
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202201
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a0:01:fd:0a:e7:06:96:d3:45:c5:4f:0e:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:31:34:f7:96:25:b4:1e:b8:9a:bb:ea:a6:
96:7f:32:6a:3e:59:40:40:8e:a1:5c:35:2f:ce:67:
b9:02:cc:98:a2:9c:65:ae:23:15:11:7a:82:58:50:
06:9d:46:4b:7c:98:4e:d4:3f:05:e9:ad:f5:ca:c1:
93:ee:a2:fd:86:94:f0:26:63:98:85:d1:e7:bf:d3:
e8:10:b0:04:4d:a6:15:98:d9:45:6b:15:71:e5:c3:
f7:f3:d1:83:c9:da:9d:90:19:06:81:0f:83:bd:d4:
15:5a:f9:a9:d4:62:ac:3b:f3:8e:e4:18:9c:a5:be:
48:01:19:7f:83:37:34:81:22:4c:99:2c:3d:59:fb:
48:97:9c:e0:87:82:42:22:99:bb:50:ad:85:9e:36:
06:86:3b:21:e3:97:b8:02:09:21:aa:e8:b5:63:b6:
f8:61:b2:a1:1f:75:d9:b8:2a:05:d3:b1:06:a8:18:
44:cf:b5:a3:fb:7f:78:88:0b:73:7c:02:d3:bf:2a:
ff:e5:d7:15:7b:2c:ae:9c:62:84:61:26:9a:b5:e7:
fa:12:2c:53:ad:22:11:be:e8:ca:2a:77:8d:f6:27:
27:39:da:4a:35:fe:ea:d6:bd:e9:b8:e2:4f:ea:ba:
1d:10:07:4a:41:5c:d5:d3:99:53:c0:06:bf:93:c9:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202201
Signature Algorithm: sha256WithRSAEncryption
8b:9c:f1:42:89:58:02:6c:40:10:e5:24:21:9d:95:09:1f:79:
87:a8:10:97:5f:ea:d5:4b:75:34:5b:12:b1:c6:13:d8:2e:b3:
c7:f8:e5:10:a9:15:99:07:c8:79:dc:be:2b:68:4f:ba:7e:64:
c4:1a:b3:04:3b:07:d9:c3:1f:9b:bb:6d:35:97:8d:c7:68:60:
1a:75:0d:9f:e2:d9:13:cc:06:98:b3:15:e7:60:da:ba:d9:95:
bf:0b:fa:59:44:11:5e:a6:79:c9:ea:62:b5:10:5c:b0:78:19:
ad:53:02:d0:26:ab:33:c9:fd:57:d7:91:ad:39:75:20:ff:e1:
2d:8d:6b:c4:5e:c8:f5:51:b9:df:04:ed:4f:3e:42:99:fe:b9:
cd:d7:4f:37:00:20:13:14:c6:31:4d:73:53:e7:62:86:99:50:
bf:77:12:c6:86:2f:81:ce:c8:0c:cf:b4:c1:c9:15:8a:c6:9d:
d9:28:b6:cd:1c:35:2d:8b:78:6e:9f:53:9d:d8:17:84:d3:40:
7b:62:ed:42:e4:3f:fb:4f:8b:54:dc:43:90:f9:be:10:18:ac:
ba:2a:16:b8:54:8e:b5:9d:05:50:89:5b:29:24:20:f4:af:a6:
2f:4f:31:97:b4:02:83:9d:73:e7:d8:26:2e:f4:8e:a6:c0:8d:
eb:ef:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:25 2025 by rpki-client