Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
File: PRf0av89iyHwD-6PY16uNKf0pNc.cer (raw, json)
Hash identifier: tyD+5kIuFowTMz5tUTCTWLCtW0V8CAYelJq5U66/Ee0=
Subject key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B60F84F6209B0A598FDE3BB1005F6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202262
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0f:84:f6:20:9b:0a:59:8f:de:3b:b1:00:5f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:f7:dc:0b:d1:84:fe:dc:97:5a:2b:e6:d6:
99:c3:f7:62:35:b3:12:e4:7e:25:b7:c1:47:37:54:
ba:f1:ed:f4:08:0d:3d:2f:f1:43:50:94:39:e6:66:
20:2c:38:6a:24:cd:fe:d4:0e:ea:49:f4:cc:39:89:
34:ac:bb:c2:b7:9e:5c:9b:dd:2e:97:b8:b5:77:ed:
f8:75:a2:35:5d:b5:74:d4:08:73:c9:f6:d2:a8:93:
a6:0b:49:b9:1a:d3:23:d1:19:ce:d4:4c:81:6e:a2:
86:a2:b2:51:86:be:8a:df:33:dd:1f:5c:71:17:3b:
38:01:e3:d1:fc:87:92:06:64:dc:b5:46:a2:62:08:
11:2b:84:39:4a:70:70:f4:1a:c1:2f:3c:cb:83:eb:
99:61:e9:23:20:dd:e3:da:31:2f:14:46:38:51:2a:
32:a0:d1:00:d5:e7:7e:3f:c8:8a:71:31:75:35:f9:
7e:40:f7:ce:f6:ce:9d:91:6a:2e:53:81:11:1a:74:
29:ef:9f:0f:e7:a3:67:9c:66:e3:8a:84:c6:f0:65:
47:18:9f:99:0d:9d:a0:a2:49:23:4d:b0:70:cd:be:
89:f9:ec:04:62:4a:e9:a2:1b:fc:7d:6d:20:65:db:
fc:98:1c:29:00:ac:9f:a6:c3:69:8e:a6:32:e2:c7:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202262
Signature Algorithm: sha256WithRSAEncryption
aa:d8:08:2b:20:2a:77:bf:0a:bb:8a:d0:02:33:ca:a2:fb:10:
e9:69:5c:a9:00:0d:92:11:8f:68:99:d4:f3:d7:ce:1d:35:cd:
51:56:5e:24:16:f7:b0:36:29:72:53:af:e7:51:7e:83:e9:ac:
30:f7:f4:35:64:1d:85:6a:34:41:7b:53:4b:8d:25:a2:ea:c2:
e7:b9:0e:85:71:62:ff:77:9c:59:77:b7:da:5a:4b:c7:a1:12:
3c:4d:e4:8f:fe:21:63:6f:f2:dc:8c:a3:64:e7:eb:b8:d0:07:
ec:5d:12:32:3f:7d:ae:b3:74:ce:9b:5b:54:59:18:eb:fe:75:
fa:0b:b7:ee:68:85:0a:f3:d8:47:47:e1:6c:56:a8:e0:97:d4:
18:13:f3:b5:9d:5d:45:90:ca:72:07:99:0a:4b:01:a2:01:c9:
ce:ca:96:b9:86:d2:a5:c0:a5:99:05:39:d5:bb:2e:ef:cd:75:
d2:b9:fe:08:5f:8c:df:e5:a8:68:3d:e3:2c:92:c4:9f:3d:f0:
77:7a:91:d6:91:0f:32:3d:16:18:6d:9e:84:73:45:25:49:97:
1b:97:10:ca:7d:85:fa:1c:3c:83:49:29:b1:b3:65:a7:49:18:
a3:c6:9f:4c:31:ea:98:09:d7:be:28:29:7e:cc:48:cc:b5:1b:
02:ed:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:30 2025 by rpki-client