Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
File: JzWNbTPibSr4Q9WB3PacDREKneg.cer (raw, json)
Hash identifier: QUmPQoRgtjNgj5JBY6tVRzf0jokK20QO2iXBXwl1sww=
Subject key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019498CA38976C0A0B904CAE6AB5BB380D98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jan 2025 14:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213626
IP: 2001:678:100c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:ca:38:97:6c:0a:0b:90:4c:ae:6a:b5:bb:38:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 14:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:b6:f5:65:54:7c:f6:db:e3:49:24:b5:90:
65:88:26:c3:ff:9c:a9:29:71:c4:99:b2:b5:f2:fc:
e1:98:51:c0:7b:ee:04:cd:91:c0:1d:46:d2:0e:14:
da:ae:3b:de:f4:88:0c:b1:49:df:1b:46:49:20:b7:
0e:8c:68:dc:45:a1:46:e3:7b:8a:75:b2:61:cc:12:
c7:7d:16:36:82:a6:4b:ca:84:75:ff:d6:19:a3:1b:
df:96:4d:bc:b3:2b:35:f6:22:15:1e:96:21:8b:3f:
99:fb:43:27:1d:8c:da:d1:f3:7c:dc:88:6c:99:f4:
a5:39:cd:3c:92:86:52:7e:d3:ff:e2:e9:0b:bf:6c:
a4:6b:c4:71:79:14:6e:47:d8:3f:66:6c:07:a1:50:
a0:b0:6b:a8:63:11:5d:6b:28:04:63:56:8f:0e:07:
09:f7:eb:2c:ee:b8:70:46:0b:98:c1:6c:83:7c:3d:
fc:5b:39:32:88:75:e7:46:9a:cc:cf:06:79:66:4e:
18:bb:47:97:a8:20:cf:39:26:0d:e1:79:85:2c:c4:
8f:17:9a:69:0f:c9:7d:45:fa:b1:4b:ad:b8:43:36:
c6:33:0f:eb:6a:c0:cb:c3:3f:37:ce:7e:90:b2:63:
37:d5:b4:aa:5a:eb:5b:28:db:ea:f8:56:c0:3b:91:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:100c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213626
Signature Algorithm: sha256WithRSAEncryption
80:d6:09:68:1d:4c:0d:6d:3d:d9:5a:c8:fc:92:75:5d:b3:b4:
5b:64:a3:86:0f:f2:33:f3:c4:b0:57:fa:7b:03:63:8b:c2:8b:
03:61:1e:1b:3e:de:54:7c:82:29:c4:99:24:e3:47:84:59:00:
f5:25:8a:e8:b9:ca:5e:89:08:3f:6c:a8:c9:20:c7:52:a8:31:
c3:39:19:6b:9a:c0:be:90:9e:73:78:f0:ca:4b:3f:d8:54:d8:
65:c5:be:5b:4f:f3:19:31:d8:58:4e:1c:60:51:bc:6c:0d:f8:
8d:39:4d:40:f1:31:f4:b1:3f:fb:ce:38:80:87:70:3c:dc:4b:
ba:9f:27:66:00:84:8f:df:d8:a9:80:b6:ba:cd:36:7a:be:30:
e9:cb:d1:af:df:25:46:9b:de:ea:4c:09:85:0b:eb:dc:e5:d6:
73:fe:a4:14:97:d9:3f:51:e4:9d:1a:06:ee:b5:29:7b:f4:ab:
df:05:f3:ad:c5:16:02:6c:3b:ca:c5:11:d3:b4:5f:f0:1f:61:
3c:c1:4a:91:51:aa:f6:6b:24:4e:db:52:bf:9b:1f:f7:84:e8:
10:73:bb:60:82:4d:2a:68:07:e0:ff:de:24:57:06:0a:eb:79:
81:9c:da:86:11:8f:c8:3f:57:bd:ad:54:fd:ea:f9:f5:09:5a:
68:c3:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:23 2025 by rpki-client