Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer (raw, json)
Hash identifier: tEWK7rGA6VCjeDMlkFGnSvKxbDm5RQQaHTGdvqjbOwI=
Subject key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC80B0DC9BDB16465565D7AA950DFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205100
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:80:b0:dc:9b:db:16:46:55:65:d7:aa:95:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:0b:64:79:86:02:84:7b:ec:9f:4b:f8:a6:
6e:82:1b:44:02:7b:b7:c2:16:f0:9d:ef:47:09:1d:
24:8f:10:ca:0f:a3:f1:13:72:b2:f6:c2:7b:74:0a:
a7:88:61:c3:ac:c5:37:4b:47:b6:c3:65:5a:04:96:
7a:4b:04:90:d6:a4:6f:02:a2:63:0d:93:2d:ad:9b:
9d:57:dc:d4:b1:59:08:9a:ce:cf:bf:80:4d:a4:e3:
05:f9:33:ec:8d:40:0e:ce:55:b7:cb:45:b8:a3:2d:
17:bf:11:17:24:83:fb:20:24:e1:18:99:e8:ec:bd:
8f:41:9a:cf:80:47:ad:37:63:3f:df:2a:cb:1d:32:
75:ee:b6:b3:70:fb:33:db:82:45:e8:48:8f:ea:b1:
f4:7d:1e:2b:c4:6d:a3:89:27:f8:42:67:3a:a7:b1:
ed:58:a9:a1:80:28:53:d0:4b:0d:f5:13:f0:32:76:
c5:69:d8:04:70:23:6a:54:7f:37:a8:58:8f:f0:bd:
d5:10:fe:a8:cb:05:6c:21:03:74:57:8c:2a:16:98:
fa:9b:83:c8:6e:87:89:e9:d2:a2:6c:86:4f:8d:a2:
3d:c5:29:bd:0a:f1:6d:ff:c4:1b:db:4b:dc:74:e5:
01:fc:42:27:e8:2e:34:06:14:e3:c8:7c:f9:9f:a7:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205100
Signature Algorithm: sha256WithRSAEncryption
99:0e:cf:d4:87:f4:00:44:0b:a2:80:dd:56:1f:5b:24:b4:6a:
32:38:01:be:19:74:5e:1d:fb:69:43:9b:16:02:de:b3:dc:7a:
06:af:93:47:33:a2:d7:92:d2:b7:fd:ca:be:c6:a7:8d:1a:f9:
77:aa:60:71:c6:de:b8:4f:2a:7d:b1:07:ec:d0:2f:28:5e:65:
bd:5c:22:a2:6c:ec:6c:81:23:68:24:83:b0:a0:93:8c:21:60:
c5:f6:69:c2:bc:2e:4c:b1:d8:6f:d1:8c:43:9e:8a:ec:16:15:
8a:b4:a7:4b:7d:4b:2a:40:64:16:74:fb:a0:2f:ba:97:ab:5a:
37:f4:de:a4:e3:d1:ff:1e:69:bd:c7:9c:a8:8c:cf:ba:99:48:
9d:c2:76:55:92:df:19:4c:76:6d:79:19:b7:af:0b:ae:23:c2:
c9:90:27:9c:00:49:ee:46:c5:b2:7a:ac:eb:1f:9b:c1:b3:45:
74:e2:92:03:df:ea:31:08:4c:36:49:1c:6a:1f:9f:4e:27:7a:
36:87:10:e8:f7:27:b9:98:42:4c:18:1d:df:54:9e:37:09:f6:
15:26:2b:19:d5:9b:30:a4:93:c2:10:b8:22:19:9f:08:3d:93:
ae:00:c3:40:ee:5b:8e:51:ba:f4:ee:0d:37:fa:1d:94:4f:f5:
91:de:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:31 2025 by rpki-client