Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.cer (raw, json)
Hash identifier: aMEIlhEtFnHV+EO1geLqHRzjo28y1t/Aq+mv4mqNqrg=
Subject key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B667EC386B4154CF12240B542CDFD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216145
IP: 2001:67c:15cc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:67:ec:38:6b:41:54:cf:12:24:0b:54:2c:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:f8:a6:80:0b:08:21:e0:f5:f9:99:24:26:
2f:e1:b4:95:0f:58:bc:49:fe:2a:3b:33:7e:2e:54:
59:9d:7c:1a:8f:a9:a1:d4:2f:da:8a:54:f5:fd:23:
7c:41:0b:70:64:9e:92:64:0d:47:72:02:21:d6:b6:
69:69:5c:0d:3f:88:29:a3:69:fb:f5:7a:c5:34:65:
a0:82:8d:00:e0:2a:d1:5d:5b:ea:f4:0b:ca:a5:9c:
48:1b:dd:7f:57:94:86:39:ca:4f:76:27:04:f8:3e:
4c:7a:07:4c:b7:34:87:c7:7d:d8:ae:15:c0:cb:a6:
bf:d1:ac:66:d9:89:9b:0c:b8:9b:b2:dd:ef:50:85:
49:46:34:8f:cf:6e:90:32:ff:6a:1c:23:63:58:d1:
eb:75:10:25:d4:62:a3:c4:be:67:f1:ec:24:a6:26:
e8:b6:e8:45:a0:fa:72:39:c3:92:3a:5f:6b:f6:ea:
1c:07:42:16:04:75:28:7c:0c:77:38:b4:63:39:aa:
99:e5:66:0e:35:4b:c1:14:71:0f:d2:10:ae:28:26:
d8:8b:df:66:34:84:62:82:73:63:95:96:63:48:bf:
bf:a9:8a:74:cc:c6:ee:fb:79:e6:3e:6f:d3:ed:eb:
17:22:c7:72:ef:c3:94:87:2f:3b:aa:b3:90:93:d9:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:15cc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216145
Signature Algorithm: sha256WithRSAEncryption
2c:b1:bc:39:0e:e0:55:96:ff:5a:1f:e2:35:9b:22:a1:bf:99:
6a:31:50:87:8a:bb:9a:8e:56:bb:bf:53:ff:c5:d9:7e:2e:54:
c2:5f:e1:7a:df:df:c0:4a:6f:b6:2e:f0:a8:bd:92:35:96:bb:
72:e3:f5:a5:f7:59:eb:35:1b:e9:55:e7:37:84:69:41:f0:60:
f8:26:be:ca:37:8f:da:26:3b:ad:6b:0a:a4:3c:c6:8e:62:2f:
d6:81:be:cf:18:a2:c0:b5:32:f4:62:07:af:19:63:da:8a:e6:
90:43:b0:50:f5:f8:92:00:f1:92:bc:bb:f3:ec:7b:27:9a:28:
62:d6:aa:00:b2:23:ac:f8:df:1d:86:b8:5c:b5:f2:53:cd:ae:
9a:5f:50:1d:a2:12:08:8b:25:54:9d:cf:e1:28:1e:f9:f5:92:
6a:3e:1e:7b:cf:3a:ff:05:23:b5:54:99:2c:a1:1f:8e:8f:98:
41:40:81:ec:97:b3:64:dd:c1:da:f1:84:da:1c:b3:83:6a:6b:
a5:ba:7b:5a:f2:8f:50:82:05:1a:15:8f:5c:93:7d:12:6a:6b:
75:60:6b:8a:36:2e:26:39:17:52:4d:d1:ea:81:4f:11:fa:df:
b8:90:7f:55:0d:5f:a5:b0:e2:bb:c6:b5:02:bc:50:62:11:13:
92:d0:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:39:05 2025 by rpki-client