Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
File: SXioZBznhb40aFAwUncj5f3OVio.cer (raw, json)
Hash identifier: +8/JTQoNpcdZZOlhrNnNXCz5XkvnRt5xSewkNp0dK/Q=
Subject key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1DF572A77270A5420B7328E234B79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215912
IP: 2001:67c:d60::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:57:2a:77:27:0a:54:20:b7:32:8e:23:4b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4978a8641ce785be34685030527723e5fdce562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:4f:e7:48:15:7c:ca:b0:00:92:fc:43:c2:
b5:aa:af:9a:de:ea:78:5c:cf:b9:71:b3:8e:75:19:
54:d2:d4:aa:04:88:12:09:e2:65:f6:9f:e3:5a:54:
2e:71:e1:cc:ba:89:0a:9f:11:d0:1a:bd:34:2a:68:
7b:ad:68:ff:dc:69:b7:95:b1:f4:8b:41:b3:8f:a4:
f7:be:7b:38:8b:da:41:c9:37:a9:7d:cf:79:d4:a2:
65:56:09:ec:87:af:f5:6c:62:20:fd:22:ab:f8:17:
c1:0a:7a:56:4d:ca:2c:84:99:0d:b0:62:7e:2f:39:
be:eb:8d:05:55:63:e8:b5:a2:0e:47:0b:9d:5b:0e:
89:15:49:a8:b9:03:45:da:76:66:fe:6e:69:60:4b:
ea:71:c6:a9:12:2a:ee:9f:e6:f8:3d:20:24:08:86:
41:ae:8a:55:69:a1:2f:83:57:b8:50:5c:68:25:28:
93:a7:f1:fa:13:8e:b0:e7:ea:9c:82:79:ef:b5:fa:
b6:94:c0:48:5d:6d:78:77:af:50:14:bc:4a:04:1e:
8a:cc:53:60:10:83:c3:de:55:26:8f:dc:1c:7e:c7:
26:1c:1a:0a:90:f8:0a:bc:09:7b:f0:c2:25:9a:fd:
c9:4d:76:e7:5e:69:0d:80:fa:96:06:a0:59:d9:8e:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d60::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215912
Signature Algorithm: sha256WithRSAEncryption
3f:01:17:4d:15:11:c5:f6:da:13:f0:d0:2f:3f:7c:95:36:b4:
52:93:a6:f0:47:bc:65:75:67:07:b6:e7:fc:f7:64:ce:40:7e:
3f:30:84:ff:6d:d6:b9:a2:20:16:96:2a:e4:b9:6a:08:cf:bf:
ec:59:f5:8a:c0:49:af:4c:3b:9c:a0:4d:0f:13:c8:0e:01:1e:
fd:03:b8:7d:e2:ae:d1:c1:92:07:24:0f:47:2d:f5:f8:db:76:
89:ce:75:4c:0d:4a:a2:d6:33:76:6b:41:eb:97:bd:f9:3a:ae:
74:d6:db:a1:66:1f:4b:95:9f:05:b7:8b:df:c0:58:94:09:4e:
3d:0f:19:4f:33:f1:5d:8c:38:b9:e3:04:a8:87:27:5a:cc:0b:
df:30:d7:2b:e5:4a:22:87:e3:65:62:73:f9:dd:c6:01:96:aa:
ac:69:3f:0d:7a:e1:d6:c0:02:b7:0c:de:15:35:2a:c2:59:62:
47:af:14:21:37:20:6c:4f:e6:dd:64:bc:80:b4:02:e4:1e:09:
2e:d3:60:1a:4c:7c:bd:76:d5:d6:9c:44:3d:cc:3c:1b:de:fb:
94:71:10:be:c5:6a:e1:c2:c3:a4:94:36:65:77:10:33:a9:2b:
82:26:c4:1b:8d:00:0b:9f:32:4b:02:74:4d:a3:26:59:25:85:
56:e2:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:23 2025 by rpki-client