Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer (raw, json)
Hash identifier: 3MthVL8jRg5MLJ45t9b0sQyseq3CGMC7edEgIMCRNd4=
Subject key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A9F01DFCD2062A569CED0D0084E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213995
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a9:f0:1d:fc:d2:06:2a:56:9c:ed:0d:00:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:98:52:4d:77:13:37:96:00:6b:6f:bd:2f:
ba:83:2e:00:e9:bf:88:2a:2e:fd:49:72:62:84:42:
1a:96:4d:89:86:5b:a9:af:55:93:2f:25:15:34:ba:
7c:ec:22:22:21:66:63:df:b1:c1:46:7e:cd:e9:18:
d3:7a:c5:9a:5e:a9:e0:8e:12:f9:b9:3c:39:3c:0f:
04:ce:5a:11:26:75:f3:b4:e5:18:79:11:af:25:4f:
8b:6f:70:20:24:7f:d6:16:8e:26:67:31:8b:7a:da:
18:a1:14:39:42:75:eb:c7:94:60:e7:85:e3:cc:2b:
e0:40:34:82:3a:04:6a:cc:61:24:b3:dc:02:3c:ce:
b9:06:fd:dd:e1:71:13:ef:b6:53:20:5b:70:be:1d:
13:2e:df:c6:90:ee:d9:9e:be:28:f9:53:49:97:eb:
1e:9f:3e:56:5e:4a:30:b5:1a:dc:8f:9f:46:83:74:
40:4e:bd:79:d3:e8:e0:2a:7a:77:4e:4b:dc:15:ae:
2d:82:9b:73:7b:d6:09:15:76:be:36:42:55:18:bf:
3b:cc:9d:c8:f2:f5:07:28:d8:d6:ee:c0:bb:8d:ae:
10:da:06:bc:3e:6e:ed:b0:a9:b7:6f:17:f1:4d:c7:
ad:eb:2a:82:e6:4e:d4:f5:5a:04:5a:b2:c5:9c:84:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213995
Signature Algorithm: sha256WithRSAEncryption
45:05:bb:6c:97:b1:b6:5b:b6:cb:a3:83:c2:98:73:66:70:b4:
43:3d:c3:52:93:77:2b:e9:b6:87:27:42:2d:39:c6:70:79:f8:
25:da:b9:21:f5:11:3c:51:69:4a:cf:7e:38:bd:70:72:ae:1d:
8b:45:a2:e2:d1:30:c3:35:3e:07:f0:fd:83:cd:39:1f:ce:fe:
a0:d6:ff:52:4c:de:f0:16:41:17:38:aa:7e:75:82:1f:e7:a9:
72:c3:44:04:2a:42:d8:81:b2:47:4d:c4:2f:11:af:aa:35:a3:
b3:23:2f:1c:66:1a:6d:f6:dd:35:f7:ee:8c:28:65:9f:92:ee:
2d:2d:89:3d:92:2f:d7:49:35:f2:1f:53:bb:a2:45:16:b4:c2:
30:6c:25:c6:8d:0d:a0:66:ed:ae:60:0c:fe:66:e7:e1:9d:f1:
28:c9:3a:50:86:64:e0:34:7a:a6:35:59:29:07:d4:33:4d:04:
91:d0:ed:26:6a:41:9e:a0:8a:d4:9e:18:c5:22:ff:82:28:c7:
a6:81:18:91:26:58:d9:07:2e:5c:28:90:bf:e3:b1:30:41:6f:
0e:28:a7:01:1f:c6:a6:97:97:99:7e:a5:54:75:17:9b:87:d8:
c5:10:7c:53:32:60:03:d8:86:77:50:23:6f:64:a3:8a:46:1b:
19:cb:54:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:27 2025 by rpki-client