Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PHQZW9u2a2A65joVGPBm-gsRUfU.cer
File: PHQZW9u2a2A65joVGPBm-gsRUfU.cer (raw, json)
Hash identifier: Ogm83O64d8hrd9BsUCJYIX2kpCtyGy6qGU+otJUtKQk=
Subject key identifier: 3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E0A9C7ABEAF4FE9C23EC9D7BA503
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e0:a9:c7:ab:ea:f4:fe:9c:23:ec:9d:7b:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c74195bdbb66b603ae63a1518f066fa0b1151f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:b7:c1:c8:6a:42:ac:33:38:cb:a4:25:b2:
65:04:f0:26:a1:2b:3f:78:ed:56:df:74:4a:d2:d6:
0a:0a:b2:ba:dd:f0:03:d2:3a:d4:b4:c3:a9:58:43:
5d:69:76:9f:71:42:84:4b:57:dd:67:12:63:57:6d:
07:4d:6e:a5:e2:a1:8a:54:45:5f:f2:b6:f1:72:f6:
4c:3a:2d:ac:dc:67:b9:82:d7:c6:95:31:3a:e3:39:
63:be:b3:8a:ab:5b:55:7c:4b:26:7f:bd:f4:2d:87:
53:a2:55:8f:5c:44:9a:82:a7:4e:1e:3c:c5:a0:ab:
69:85:17:8c:58:21:12:28:db:f9:6a:d7:52:95:bb:
d1:1d:e6:bf:f3:c5:05:ec:96:15:dd:42:e2:f9:8c:
6e:f1:b6:18:c8:ac:1b:d3:68:aa:80:70:f2:7a:fc:
a3:3b:a8:64:fe:fa:70:42:11:ef:af:d8:34:88:c0:
88:d2:cc:c0:9a:9c:07:3c:95:f6:c7:64:31:79:5d:
90:72:4e:40:6e:cf:bb:56:23:d4:f2:b0:ee:8d:57:
2e:1c:52:bf:16:f0:42:38:dc:b1:09:4e:4e:87:a5:
87:90:19:28:f4:74:fd:34:3f:ec:8c:37:6f:1c:b6:
78:da:b8:ae:22:fb:1d:45:a2:cb:99:ef:c4:17:0e:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202843
Signature Algorithm: sha256WithRSAEncryption
7e:2b:7c:09:eb:05:32:cd:60:d6:b6:c1:8f:d4:be:86:9e:6e:
d0:e4:2a:5a:f3:71:03:86:0c:f5:8c:de:c3:2a:b0:9b:71:8b:
59:f8:b0:67:57:54:7a:24:16:01:be:7f:5b:37:7f:bf:5b:43:
16:3d:77:48:0b:43:14:4d:fd:83:55:fc:36:8e:48:41:76:83:
c3:b6:6a:8a:16:b6:71:98:de:5e:3b:2d:e4:ea:10:fd:57:a4:
68:41:28:17:22:df:00:3d:99:9e:a6:25:3e:f1:87:b6:50:60:
2f:c6:b5:b1:fc:df:37:08:4c:ff:6f:6c:7d:05:3c:58:1f:f8:
b1:8d:e4:f5:0e:4c:90:59:22:7a:20:a5:ad:ac:56:fd:93:0d:
df:76:8b:f0:59:02:3e:d3:0b:74:5f:fb:a3:49:a3:22:a5:5e:
b7:f3:d1:80:13:41:b2:e4:b3:aa:f8:d8:c0:3d:ea:02:44:49:
a0:cd:10:4d:b7:ba:c7:15:6e:ff:e1:53:35:5a:79:64:43:03:
cc:5c:6d:23:50:5b:8f:e2:eb:4d:9f:3c:69:52:73:7f:0d:a3:
ec:e3:83:75:2c:27:c4:a8:20:e7:f8:4c:b1:13:d5:52:16:14:
f5:ba:44:fa:8d:6c:04:00:5b:03:7c:3f:d5:53:e4:3e:84:82:
3e:7d:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:14 2025 by rpki-client