Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SvoHcYEuZjfYsYof9Q9B80mGaak.cer
File: SvoHcYEuZjfYsYof9Q9B80mGaak.cer (raw, json)
Hash identifier: WgHH539bGjtEqbp1vt35QkbnZC2xRN2NhDzO3OnTl3g=
Subject key identifier: 4A:FA:07:71:81:2E:66:37:D8:B1:8A:1F:F5:0F:41:F3:49:86:69:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C997C18150BCC61B88552DBEC4942
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213045
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:7c:18:15:0b:cc:61:b8:85:52:db:ec:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4afa0771812e6637d8b18a1ff50f41f3498669a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:0e:92:1e:96:c0:4e:1d:ba:b2:2d:e1:eb:
41:aa:c6:53:37:a9:f5:dd:8f:e7:cc:30:25:5a:3c:
af:f9:a1:3e:e1:84:21:68:32:49:2f:e7:ae:95:0c:
cf:4c:4d:da:68:30:51:ab:fe:13:3c:6e:43:07:1d:
99:5b:8f:0a:9f:83:48:38:33:b8:7f:d5:a6:87:c0:
4f:4d:e9:6f:2b:7e:e5:29:99:8b:69:1d:58:a0:08:
6d:a9:a2:7c:fd:6f:de:e2:55:f7:84:d9:60:25:ff:
7b:3f:bd:2c:f7:5e:f8:77:c5:2a:b5:46:29:ca:5b:
b5:1b:d3:33:c7:88:ea:0e:25:3e:29:de:61:fe:9e:
6b:9c:25:e0:34:58:a8:67:a7:77:39:22:05:ba:1b:
73:ba:f5:97:82:7c:46:2f:48:ae:8e:65:42:a2:50:
61:77:a3:1f:fb:da:e1:5a:3b:00:dc:12:d3:64:10:
80:63:22:b4:41:f6:b1:b6:1a:0a:ed:7d:3c:89:db:
6f:81:0f:38:0a:13:22:9e:f2:bc:ac:18:09:39:4a:
f5:19:4c:1a:b7:d1:18:fc:ac:ae:d9:71:ac:f2:9f:
b1:9b:91:9a:dc:65:59:e4:da:02:68:44:0d:9e:00:
d0:8b:17:04:5d:17:e8:59:25:c0:dd:33:83:6a:87:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:07:71:81:2E:66:37:D8:B1:8A:1F:F5:0F:41:F3:49:86:69:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213045
Signature Algorithm: sha256WithRSAEncryption
23:5c:1b:8c:10:9d:94:d0:f6:a4:e3:9e:42:95:78:bd:8b:81:
1b:47:ac:fe:20:a2:1e:45:49:e1:92:b7:1c:62:49:d1:14:0d:
96:68:83:7f:2c:72:bc:83:7d:f6:88:d1:48:68:d2:21:4c:fa:
c8:50:5e:19:d7:06:83:fc:0b:98:98:75:e6:b7:9e:90:15:1f:
18:9e:b4:a9:13:0c:8c:1a:e9:90:9e:80:2a:d4:cc:56:34:de:
be:3a:db:c9:42:2a:e0:e2:4c:6c:da:c5:e9:fb:87:01:09:8c:
8c:b9:54:4d:00:74:94:9a:cb:ad:99:92:bf:f0:09:7e:7d:f6:
7d:ab:e0:3f:c3:13:9c:a6:cb:6b:29:d2:fa:7b:e8:02:e2:c0:
50:21:29:55:8a:4b:62:19:96:99:db:0d:18:fb:80:74:70:0f:
08:14:a8:0b:61:62:93:ad:5f:60:d6:54:52:9e:b3:1e:4e:e0:
25:72:7b:1f:be:e5:89:b7:c1:13:47:fe:1f:f9:29:d6:04:b2:
51:24:2e:38:e5:35:91:bc:6d:45:4f:e9:9e:f2:91:fa:bb:33:
03:fa:27:cf:f0:5b:41:89:a6:6d:75:cd:7f:8a:68:b5:1e:82:
0f:09:49:e2:ee:ec:99:cf:9b:87:1c:5a:e4:a7:0a:c6:02:b6:
e7:c6:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:20:25 2025 by rpki-client