Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer (raw, json)
Hash identifier: cM5d3R7jXuZvqgDv2n3lcUqggGaDWEwGmYhK2WibxSE=
Subject key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B38DB0551B3BF9877EF8E8A7EB81E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209927
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8d:b0:55:1b:3b:f9:87:7e:f8:e8:a7:eb:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a110452384649d05c1e98fb97b49ae11600973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:29:4c:a2:c4:04:e8:e6:a2:7f:e1:18:ae:
1e:f2:56:1c:ba:fa:a5:af:ca:3c:b5:19:da:6a:08:
3f:22:3d:61:e2:bb:b1:02:b1:67:ef:74:e3:09:ae:
c7:23:db:7f:60:0c:f8:07:46:2f:5e:44:0f:93:0f:
39:39:92:c5:23:65:aa:ab:21:f8:81:b1:1b:6a:b0:
7c:13:be:23:d6:d8:f7:18:5f:0e:eb:72:ba:af:32:
4a:b8:3d:89:a2:54:35:8b:80:63:00:3c:67:94:42:
79:7e:14:9a:b0:a6:0d:02:a9:4b:2f:bd:e7:d3:9c:
f3:9c:37:aa:80:ca:3d:4a:07:78:58:e6:4f:d8:e0:
85:fe:46:26:43:8b:33:3a:17:f4:7d:1f:de:fb:7d:
05:fc:7a:b3:bd:d7:41:42:67:cb:85:ac:40:f4:6e:
dc:86:94:1a:58:be:36:0d:0e:f1:4d:e6:1b:f6:0a:
fd:e2:d4:5c:71:26:dd:34:90:db:34:c4:df:29:e9:
ac:2a:8c:e8:7c:19:7c:92:7f:b8:f3:6d:e6:21:d0:
6a:ca:bd:b1:92:30:19:e3:9a:96:9a:20:c4:c3:f5:
46:65:6e:ed:df:ae:4c:a2:16:09:11:e8:20:f2:d9:
a0:2c:28:02:29:ba:20:d0:5b:89:17:7d:a9:33:2f:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209927
Signature Algorithm: sha256WithRSAEncryption
63:ff:fa:5d:20:e5:7c:38:2f:d5:7c:7f:23:26:d9:8d:d7:bf:
42:29:3a:be:f9:78:7c:10:20:91:66:38:95:f3:ce:0c:99:a4:
7f:82:aa:47:06:94:f2:d1:1d:88:93:e2:fd:06:5f:8c:c9:3b:
c1:3a:a0:67:ed:c9:f0:b9:d6:ff:0d:6c:d4:3d:74:37:31:86:
d0:bc:90:0d:82:cb:bd:91:d0:24:3c:9e:72:88:53:e7:4e:ed:
b8:19:8d:b1:2c:00:3f:53:9c:74:45:a5:15:90:5f:65:9a:1b:
a0:ed:4d:de:5b:fc:20:ec:78:d9:bc:6e:b9:9f:a7:11:15:6f:
40:b8:19:20:54:28:32:aa:35:01:d1:56:36:9c:24:e0:d9:00:
83:2d:13:fa:26:71:cc:46:09:66:1f:0c:4e:e0:00:6b:e4:82:
3d:f5:e2:a5:31:8c:d2:f6:ed:bf:73:62:1a:e7:35:89:80:5a:
2c:7a:cf:37:c8:2e:ac:95:c2:68:93:5a:f3:f0:b3:1e:7d:6f:
b9:4e:01:ea:e7:e8:b0:0b:3e:f0:4e:c3:30:51:7e:b5:11:4b:
51:fd:15:52:b8:34:be:95:a6:26:41:e5:8b:65:70:84:e3:04:
1c:49:a3:79:d5:84:a5:a2:11:c1:09:9c:d0:45:ce:20:9f:f8:
ae:d8:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:25 2025 by rpki-client