Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
File: Kt_vhCTbu4eonZOJhODis-2aq4s.cer (raw, json)
Hash identifier: Q6Wxy2fkZzmRGPVH8LeYhc0QnpusBECuu78VBKEFkSY=
Subject key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E7FA7701B0B90BC0534A5F6FA346
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215910
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e7:fa:77:01:b0:b9:0b:c0:53:4a:5f:6f:a3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:85:27:de:1a:ad:ab:9d:88:d4:28:ca:21:
2b:ad:f8:34:f0:64:60:13:39:91:75:61:40:32:a1:
e3:9a:d0:29:1e:7e:ca:12:27:15:44:f9:cd:4c:5c:
36:6e:cd:46:45:44:3a:5d:ef:bb:b8:7c:6e:3b:c6:
84:d5:9c:ae:15:7e:70:87:6d:f5:1d:64:02:fa:1f:
89:9e:2d:35:40:f7:7a:df:5c:e7:bc:19:9c:b5:4a:
b2:81:e0:3a:0b:8f:b6:e7:32:3c:77:2f:08:08:28:
44:e9:87:b3:2f:79:81:d0:5a:04:35:55:c0:a3:aa:
6b:ee:de:bd:f5:20:57:46:74:1e:be:a1:15:29:37:
d1:9d:6e:15:bf:2e:8f:0a:ac:89:4f:0f:2b:b7:41:
ca:5e:3c:70:7e:83:dc:b8:c6:1b:6e:bd:93:16:5a:
c1:77:bb:d8:59:b8:cd:c3:bf:55:f3:14:5f:5a:f6:
7b:18:1e:f2:19:82:a6:5b:ca:07:9e:0d:d1:c8:f9:
c9:e2:8a:99:83:95:4c:45:21:c8:94:57:8c:f4:cf:
29:81:18:9b:f7:d1:fb:19:d9:87:51:5d:fd:cd:fc:
07:8f:d1:3a:fd:c3:c9:08:1a:b4:cf:36:05:db:2a:
a8:4a:99:37:c3:c7:a2:57:d3:72:c5:f2:c3:d7:45:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215910
Signature Algorithm: sha256WithRSAEncryption
5a:7b:a1:95:0b:02:3c:61:2e:34:52:eb:44:43:77:8a:63:23:
8a:e9:18:d4:49:2f:ce:5c:d5:63:5d:92:b6:b8:2d:4e:39:15:
89:a8:94:d6:37:ca:08:d3:67:bb:f1:ea:9e:9b:c8:6f:96:3a:
81:81:f2:1c:90:f0:02:a0:69:39:1a:ec:a9:fe:c2:2e:04:16:
ab:60:f9:b1:4e:b2:61:68:e3:fb:cc:2f:bb:22:0b:f3:de:c7:
92:07:8d:aa:af:6f:4e:8b:ad:3f:ca:08:29:06:62:e2:0a:57:
2c:49:0e:43:74:ab:f9:a9:d1:fe:58:d3:4d:98:bf:26:29:44:
9f:dd:a8:00:5b:27:bf:b0:d9:5e:5e:fe:38:55:d8:f1:ec:35:
00:bd:8f:90:42:fb:6f:56:d9:c7:7e:58:cd:fd:a3:19:46:4e:
2f:44:34:84:1c:9f:a8:fa:c8:e8:60:70:d8:4e:c8:1b:47:ff:
ed:7a:c7:74:f2:c2:7b:40:7a:8c:fa:ca:b7:f0:e2:a9:95:25:
db:84:82:a8:35:ac:87:fc:2e:08:2a:41:23:d0:55:ba:d8:d7:
f6:53:5c:c0:d9:1b:9e:64:0f:fe:2c:2d:c4:4e:a5:e4:c3:97:
bb:16:db:27:4e:29:84:ea:65:c5:09:c1:58:87:b6:d9:6b:4d:
3f:ab:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:10 2025 by rpki-client