Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer
File: Ma-3caS5EQsRSqgHr7cIaxplN54.cer (raw, json)
Hash identifier: 4MmFZUr0gUQhylkqjIERFhXMfWZHyarFY8ZC2doZCuA=
Subject key identifier: 31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F77ACF5C89453D32C6815CAF6A63D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215066
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:77:ac:f5:c8:94:53:d3:2c:68:15:ca:f6:a6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31afb771a4b9110b114aa807afb7086b1a65379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:61:0a:f8:9c:d8:00:b4:7f:9f:95:ee:71:
7d:fd:17:9c:dd:7e:cb:82:6c:d7:8d:be:e1:dd:f0:
0c:60:92:bc:11:a6:25:ec:a1:19:83:53:65:ec:75:
3a:91:d7:5b:0b:d3:42:cb:9f:9d:a5:e9:69:05:3c:
0e:44:0d:7a:f1:28:50:fd:af:a5:1a:c2:39:11:e7:
b4:b1:3a:89:8a:56:70:a3:3c:f7:82:bf:fb:28:74:
fb:46:c5:78:39:96:6c:f8:2e:61:2a:62:d8:b2:43:
d8:7c:d2:7a:96:95:a0:07:06:8c:08:dc:14:be:23:
51:0e:be:46:fb:8d:07:78:c8:69:eb:7e:24:a4:ab:
63:58:0d:66:dd:d7:d9:3c:99:2d:88:78:f9:38:fb:
40:b0:c7:da:f0:dc:66:0c:9f:48:17:8f:72:9d:e8:
55:07:f8:63:10:fb:90:17:e2:f1:5e:a2:5e:82:47:
e2:e9:56:4c:5d:6a:82:79:aa:2d:ea:17:68:a2:fb:
5b:df:83:ce:e3:4a:4d:c4:0f:4a:70:4f:87:3e:eb:
03:76:76:97:44:6d:ee:f4:c9:8a:60:77:7f:cf:57:
1c:e3:70:0d:7f:11:7e:d4:fe:d1:18:5c:4d:cd:ae:
6f:88:c9:9d:5f:8b:ca:73:2f:16:7c:5d:11:55:85:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215066
Signature Algorithm: sha256WithRSAEncryption
6e:ca:45:c6:a4:dd:aa:d5:7b:c6:cd:1a:a7:17:5e:bb:b9:95:
85:39:ef:4c:40:2b:f7:d2:51:20:80:f0:1d:37:fa:09:ed:c4:
3d:99:9f:b4:84:e1:69:e8:1b:89:52:fb:d8:2e:a9:55:d4:76:
63:0a:23:d4:9d:f6:a0:58:a6:4e:7a:12:56:f7:6a:f2:31:ac:
1d:10:9a:b5:cd:5f:4b:78:ce:85:5c:0e:3b:33:9b:21:3a:23:
7a:3b:39:c7:d2:5a:0e:80:40:1b:d4:80:ab:e1:bc:3a:ea:eb:
b8:d4:ac:45:9d:89:41:05:12:56:92:65:fe:ed:b5:94:17:5f:
35:bc:93:e1:5d:20:86:d6:2c:e7:fe:0b:21:da:ee:19:36:d0:
3f:7c:8a:ef:e1:e0:29:eb:1d:6b:5d:a2:f8:e3:8c:da:21:89:
4e:8e:7f:99:30:0a:07:05:de:e6:f2:95:60:c1:54:42:25:e4:
b8:b2:70:5a:ba:18:4d:09:56:99:28:f4:0f:e2:33:00:46:74:
ba:9c:eb:ca:36:8e:82:ac:89:fe:c2:b9:6f:b0:ca:68:61:70:
75:24:13:02:09:4b:f6:a7:8f:2f:7d:c1:62:4e:41:1c:cc:99:
60:11:8f:9e:cb:15:19:55:f5:98:00:06:02:50:0a:f4:a1:89:
8a:99:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:41 2025 by rpki-client