Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
File: S674BgHHxrBqwfclCB8kLg8GvFE.cer (raw, json)
Hash identifier: nJdRn23nxU6eZcfFDFIfU9gj9NUzdZBtMrs93vLhzy8=
Subject key identifier: 4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E2F2F66BAF8DE63ECEA2917626B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198304
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e2:f2:f6:6b:af:8d:e6:3e:ce:a2:91:76:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:20:f7:02:26:01:68:31:e2:48:c9:16:9f:
2d:76:87:45:af:fb:8e:c0:52:17:57:ac:5e:8e:37:
57:72:0d:a9:0f:a8:3e:82:cc:8a:db:47:1d:8a:34:
17:2b:79:3a:49:5c:7c:96:8d:b3:a7:90:db:24:85:
08:ba:2a:6f:65:af:b4:4c:7e:e4:bb:8d:e9:ff:16:
4d:ab:b9:51:96:d7:5a:19:ec:f7:03:2d:1b:46:34:
95:48:ba:42:29:27:3f:1a:03:ce:cd:b7:ed:95:49:
b1:83:06:67:f9:cd:ec:fe:be:91:ad:2a:99:22:61:
80:91:1b:6e:c1:44:fc:01:9c:bc:6b:20:4c:83:73:
c8:cc:fe:ed:b8:d6:a5:88:97:16:f2:b2:2b:6c:be:
42:66:79:5d:a9:7f:bb:6d:bc:31:b8:fb:10:ea:fe:
42:5a:f4:52:b9:8c:7a:7d:e8:d2:19:51:7d:10:53:
e3:a5:45:b8:bb:c4:ff:d3:7a:a8:8e:5b:19:65:5c:
1a:a6:15:ff:19:7d:84:eb:40:6a:7f:85:69:e7:f7:
24:c7:eb:b5:16:a7:9f:b5:ca:0e:b5:a1:52:3c:e5:
da:b6:8b:4e:ac:e9:c3:d5:43:5e:d8:e2:01:af:fe:
75:ce:4c:b0:17:89:39:e2:ed:fa:5d:c0:d1:47:3a:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198304
Signature Algorithm: sha256WithRSAEncryption
99:ff:53:01:b1:6a:a1:58:6a:4e:2e:46:ec:54:d9:bb:ac:4e:
8d:95:ef:cb:75:6e:49:f6:07:59:38:fc:82:09:ff:2f:7a:91:
26:33:14:15:bb:cc:56:75:eb:5f:58:9f:fb:58:f1:a3:8b:91:
e2:7b:59:1c:e4:09:0d:27:f1:bf:3d:1a:61:69:0f:e5:c5:b7:
b1:ea:5e:92:e2:67:d6:a3:90:91:95:95:4f:a8:84:d0:cd:65:
65:69:bf:d4:d4:37:0b:da:65:fd:2f:c6:5b:78:25:2d:9e:ff:
85:1c:b7:9d:ff:4a:f0:07:1b:23:1b:00:de:33:04:fd:cb:b0:
e6:f3:2b:a3:3b:76:b4:31:e1:f7:1e:78:20:02:e2:3f:6e:b2:
3a:3e:39:15:db:56:96:5f:00:11:47:90:11:df:c1:4c:df:e6:
42:f6:54:c3:7a:74:8e:a4:77:aa:55:7c:71:d8:72:5e:66:6e:
7d:6f:0e:5d:40:7f:cf:22:8d:e9:bd:ab:25:de:0a:1b:e1:86:
31:38:85:4a:79:3d:3e:6d:10:2b:82:85:3f:72:fa:dc:da:1b:
60:94:5a:52:04:8e:35:b0:fc:74:46:8b:9c:b5:f8:11:65:99:
1a:c6:e9:6d:f2:ea:7a:17:82:c7:d6:09:99:1e:45:21:5a:47:
4f:bb:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:46 2025 by rpki-client