Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
File: R_0xZFbhuX__wjKZ9uvNoF93nzw.cer (raw, json)
Hash identifier: 6Q/HU3haCIvU+FZYDZzl5VeXsnD1CFBValvTFGll+ZE=
Subject key identifier: 47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B7CEA70EBD009EF4EB4AD29ACF3F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205387
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7c:ea:70:eb:d0:09:ef:4e:b4:ad:29:ac:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fd316456e1b97fffc23299f6ebcda05f779f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c6:34:c6:72:c2:7d:93:d0:b9:c3:c1:09:
d4:0d:f2:25:6a:d1:5b:d1:96:6a:be:43:99:76:40:
e3:8b:f6:76:fb:6d:da:0f:d3:f3:fc:8d:d0:8b:fb:
88:55:d6:84:b3:15:5e:ac:b9:64:e0:31:73:1e:a2:
b6:09:25:dd:58:1b:4d:8f:04:80:bf:59:ab:88:68:
3c:ac:6d:c4:25:f9:da:4a:66:b2:3c:83:23:6f:99:
4e:03:7a:df:f8:0c:b9:b8:0f:a5:d5:5e:63:d6:4f:
87:09:7b:60:7f:d0:b7:9c:20:bf:d7:ef:37:05:0b:
37:5e:e6:65:90:4f:7b:2b:63:57:5e:b5:5a:f4:45:
c6:b1:45:b7:ba:ed:23:d8:5b:cd:da:fc:5e:2e:92:
5b:33:52:86:36:79:ac:34:c9:b4:5f:ed:b6:bd:c0:
de:fa:11:3a:cb:86:ca:1d:25:25:e2:12:6a:44:37:
35:7b:df:c1:0a:1d:a9:9b:b4:86:c4:f3:4f:60:ef:
77:d0:65:52:df:0a:31:a3:4e:14:ec:2f:3a:be:55:
97:15:b9:79:14:ba:7c:71:d2:8f:95:7b:bf:87:f0:
8c:2c:2e:d7:5d:e8:38:10:46:43:99:f2:1f:b4:91:
67:19:a9:52:db:30:89:36:bc:43:48:e0:14:b0:a5:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205387
Signature Algorithm: sha256WithRSAEncryption
1e:ca:c6:52:d5:76:51:78:08:8a:26:ac:75:44:d9:2d:40:68:
2a:fc:ea:dc:e1:bc:5d:db:df:00:b4:0b:67:5a:9b:9f:87:5c:
38:69:7b:fc:99:98:15:82:75:06:78:11:e3:9f:5b:fa:9a:cd:
29:fb:23:3e:18:8b:84:62:be:1b:dc:64:b1:a2:db:04:aa:16:
3d:11:e4:d3:93:95:31:7b:7d:01:9e:51:0a:f3:2d:f3:93:4e:
f1:02:ed:0c:79:f8:2d:0d:d0:89:5a:45:a9:79:f1:b8:ad:7c:
a5:fe:77:a7:2f:ba:96:e9:6a:56:34:6f:74:6c:21:b8:55:51:
cb:3f:5b:06:bb:62:59:85:9e:b9:42:a6:dd:7f:e2:54:52:2b:
0a:97:17:ac:88:16:24:37:98:5c:ab:58:c4:3e:29:7a:32:26:
2f:e8:9e:5e:73:28:a4:0b:35:1f:4d:0e:71:3a:2e:63:ea:17:
45:66:e1:ab:36:15:33:73:39:2d:01:ef:36:4b:a0:b2:43:60:
9b:d1:09:b7:66:80:be:ae:4f:2d:72:73:71:c4:39:fa:1c:13:
c8:65:df:d4:c4:9e:7d:41:4e:e8:81:ef:6f:ec:ac:55:43:14:
a5:b8:4a:02:0c:12:ab:f6:0d:78:c2:49:ed:90:69:c0:62:97:
c6:68:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:15 2025 by rpki-client