Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.cer (raw, json)
Hash identifier: za2H4QfdAfBwYfUIBftSQHcgSEziY54mM4+fgY/FkhU=
Subject key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B22207D5E593AD4FB6305DC27098D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213697
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:22:07:d5:e5:93:ad:4f:b6:30:5d:c2:70:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:fa:18:4f:f2:33:86:0e:99:0e:dd:b0:15:
dd:72:f9:4d:a0:ce:64:71:d4:eb:ec:62:35:db:e6:
1e:58:00:be:de:46:39:5c:b2:a7:23:22:e2:99:e4:
fe:a0:97:65:6c:3b:c1:8a:bd:97:21:07:bc:d4:61:
80:38:3d:6d:63:df:26:20:ed:5b:56:7c:40:e3:9c:
88:8d:eb:e4:aa:9e:ca:e4:24:d1:71:d4:b6:16:38:
03:09:45:31:83:ee:af:32:57:4f:15:3a:a1:cf:7a:
f3:b4:8b:b2:f6:72:8a:29:eb:db:49:47:8f:77:a7:
aa:f7:0a:e8:de:9b:07:8c:44:f1:03:ad:39:88:8c:
b7:66:9a:10:db:6e:39:20:30:c3:02:07:e7:9e:fa:
21:10:67:09:a0:e7:39:d5:13:ad:a3:0a:ca:03:e2:
eb:1e:7c:aa:65:d0:16:57:7c:97:b7:97:ad:2f:79:
47:76:75:74:96:cf:83:6b:8d:2e:04:a4:45:86:c2:
60:19:de:b7:78:ea:16:d1:23:fa:b5:7a:05:60:8f:
7b:57:19:43:df:c9:30:82:d9:cd:03:f1:b3:78:2c:
ff:f0:ed:c2:3b:10:9d:a9:ba:d5:69:7a:df:47:aa:
2f:0b:59:ae:58:db:10:46:2f:ed:8b:47:6a:31:6d:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213697
Signature Algorithm: sha256WithRSAEncryption
a4:13:bb:79:83:6f:d5:de:bf:27:10:02:40:cc:f2:c4:1d:36:
8f:bf:18:7f:59:5b:14:77:d0:84:d1:9b:25:53:2d:da:3b:06:
1c:83:4a:5d:d9:4e:d8:b6:ce:15:11:9a:91:b8:c2:cb:9a:01:
b0:b4:89:cb:d9:19:e7:27:88:82:7c:2d:aa:7e:01:d2:16:06:
e3:59:98:a4:14:86:93:1b:8e:fd:0b:74:7a:ca:ab:90:41:19:
ee:54:7a:32:7d:07:2c:f5:8f:3b:b0:f2:5c:32:90:bb:88:37:
14:a8:2c:ae:95:f0:9f:2c:ef:ff:a1:5d:ed:1d:12:e5:98:d9:
be:33:d3:1b:c8:a0:12:19:d6:f5:52:1d:cc:31:cc:18:a3:e1:
d3:f9:82:6a:a2:f2:84:7e:cb:1b:47:b7:08:5a:c5:6c:a2:63:
d9:e6:5f:fe:29:bf:77:f3:c1:9f:84:f6:85:bd:f6:f4:c8:61:
6f:b5:ac:9d:6e:6f:ad:95:84:3d:5d:83:2a:4b:f7:ef:32:29:
6e:40:71:1a:d9:db:65:7b:71:af:c7:3f:4b:31:51:53:3f:8b:
b8:78:bb:90:6b:0c:77:ae:6c:5b:3c:8c:6d:cb:55:5b:0d:b4:
80:63:1c:bc:21:2b:db:76:e1:41:d3:4f:fa:10:6b:e5:18:09:
eb:41:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:40:51 2025 by rpki-client