Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
File: JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer (raw, json)
Hash identifier: QfaaulATqWAL2kFok8XI02kKYDLdxQ3wdHnIF19xfE8=
Subject key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01953B4063498CC45F23E59DD83AE32D4685
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 25 Feb 2025 03:57:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50104
AS: 210537
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:40:63:49:8c:c4:5f:23:e5:9d:d8:3a:e3:2d:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 03:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:c5:da:22:04:41:d0:f2:96:c6:81:ea:ab:
be:72:d6:da:90:98:e0:00:d6:b8:22:b9:87:68:b1:
85:77:11:20:07:6d:b7:9a:de:f3:79:2e:ce:47:1c:
0e:4f:ca:7a:24:02:98:a1:38:10:99:fb:27:85:e1:
31:21:91:11:01:d7:93:5e:82:29:3d:36:55:f1:ac:
c9:5a:32:b8:bd:f6:29:0e:54:e1:fe:08:b1:85:ef:
06:45:19:08:b6:41:1c:3e:90:a2:20:46:4a:36:36:
f9:1c:65:c6:26:a6:6e:3a:80:3c:65:dc:9f:7a:50:
22:5c:2c:ab:f9:5b:4a:2e:03:20:7f:94:f1:53:9b:
83:15:02:cb:4c:1f:01:a5:b5:d4:72:07:3d:61:71:
57:54:06:30:50:72:14:2b:06:71:5c:67:62:26:43:
7f:26:73:ed:62:c8:88:55:19:82:25:af:b3:4a:68:
5d:27:8b:ea:d5:e9:2f:5e:5e:f1:b0:4c:81:0c:e1:
ef:d7:b4:94:52:18:09:cb:e1:c2:66:7d:7c:bb:4f:
f6:2d:e9:0e:ff:57:64:01:2d:40:b0:0d:1a:14:4e:
48:55:81:42:40:6c:44:6a:85:0b:24:53:82:46:31:
da:95:80:55:d7:82:23:49:ed:2c:59:ea:22:cd:5d:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50104
210537
Signature Algorithm: sha256WithRSAEncryption
82:ab:58:d5:7a:55:ef:fd:0f:c1:2c:a0:c0:35:6c:24:62:7a:
fe:d2:97:6c:25:5d:b4:1d:54:e4:1a:94:f1:cc:ec:14:79:81:
76:63:e2:ba:7c:1e:61:dc:7e:c3:bd:d2:7e:8b:b9:e0:75:e4:
63:6c:fc:82:47:fe:54:2d:48:43:24:44:82:73:82:7d:63:11:
e2:e3:7a:18:13:42:30:b7:91:24:9a:7e:74:ae:89:43:61:ea:
1a:73:b1:dc:c0:91:2d:d2:79:62:da:93:6f:bf:a7:09:c3:9f:
43:88:b8:64:aa:26:71:ce:6c:b7:75:c0:84:7c:4b:7d:4b:07:
10:a7:f7:9c:31:69:91:0a:5b:34:98:b9:d3:90:92:8f:b8:53:
80:53:e9:95:0a:ce:0c:02:0d:89:72:e3:15:3c:91:cc:cc:ed:
ee:c8:51:42:cd:a4:43:38:7a:78:bc:c6:52:e2:db:62:af:c7:
09:11:39:f5:f0:74:c6:d3:af:e6:61:f2:1a:62:77:31:5a:e7:
36:d1:54:d2:c3:52:fa:01:99:9e:31:90:a7:e1:76:e8:b9:9b:
b8:60:fb:ba:20:83:85:e3:bc:d6:ae:ae:da:3c:80:0f:5d:bc:
16:13:b8:c6:91:05:73:95:dd:2d:8a:49:ff:aa:b8:ee:c7:ab:
67:dd:7c:d2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZU7QGNJjMRfI+Wd2DrjLUaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI1MDM1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWJiNTQyMDU1Mzk4Y2FjMjFkYjI0MDdmZDhlN2Q3OTVhMTBmNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jbF2iIEQdDylsaB6qu+ctbakJjg
ANa4IrmHaLGFdxEgB223mt7zeS7ORxwOT8p6JAKYoTgQmfsnheExIZERAdeTXoIp
PTZV8azJWjK4vfYpDlTh/gixhe8GRRkItkEcPpCiIEZKNjb5HGXGJqZuOoA8Zdyf
elAiXCyr+VtKLgMgf5TxU5uDFQLLTB8BpbXUcgc9YXFXVAYwUHIUKwZxXGdiJkN/
JnPtYsiIVRmCJa+zSmhdJ4vq1ekvXl7xsEyBDOHv17SUUhgJy+HCZn18u0/2LekO
/1dkAS1AsA0aFE5IVYFCQGxEaoULJFOCRjHalYBV14IjSe0sWeoizV1bsQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFCW7VCBVOYysIdskB/2OfXlaEPXtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZDMw
NmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJk
MzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0LzEvMjVCQjU0MjA1NTM5
OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAw7gC
AwM2aTANBgkqhkiG9w0BAQsFAAOCAQEAgqtY1XpV7/0PwSygwDVsJGJ6/tKXbCVd
tB1U5BqU8czsFHmBdmPiunweYdx+w73Sfou54HXkY2z8gkf+VC1IQyREgnOCfWMR
4uN6GBNCMLeRJJp+dK6JQ2HqGnOx3MCRLdJ5YtqTb7+nCcOfQ4i4ZKomcc5st3XA
hHxLfUsHEKf3nDFpkQpbNJi505CSj7hTgFPplQrODAINiXLjFTyRzMzt7shRQs2k
Qzh6eLzGUuLbYq/HCRE59fB0xtOv5mHyGmJ3MVrnNtFU0sNS+gGZnjGQp+F26Lmb
uGD7uiCDheO81q6u2jyAD128FhO4xpEFc5XdLYpJ/6q47serZ9180g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:10:48 2025 by rpki-client