Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
File: TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer (raw, json)
Hash identifier: k94D281i6yLwBA1tpqUzMG7VPLrWJM2E/PrpFNKvhDg=
Subject key identifier: 4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DB6B03611CF557514C612FB80961
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202218
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:db:6b:03:61:1c:f5:57:51:4c:61:2f:b8:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cec0314dd991da3a0d661393a606a317c6cbc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:ff:fd:ec:b0:12:f8:21:7c:a3:06:73:6c:
86:ca:5d:cf:99:24:14:81:63:cc:cd:41:ba:c5:c3:
2e:51:4a:35:3a:b7:6b:ac:db:84:32:26:1d:2d:c1:
25:52:d1:d7:a4:06:0d:13:b4:a7:d5:1b:0d:c6:34:
5e:1f:eb:21:94:44:bd:ec:d7:61:46:24:7d:63:d9:
cb:db:b5:cb:63:00:48:d3:10:6c:ac:b7:9a:e0:f5:
76:0d:f0:88:c9:2a:04:d3:36:48:4b:a1:ea:43:4c:
98:db:16:63:b7:89:07:ce:e5:17:c6:ac:45:b3:5e:
b1:cc:0b:5a:46:36:27:0b:cd:8f:93:28:83:e1:52:
85:3d:0c:4c:d2:fc:58:5b:f9:1b:0b:b7:19:b3:29:
a2:01:1c:eb:b2:f7:43:6f:0c:01:1c:41:81:0f:4d:
d1:13:65:dc:28:90:d0:5b:e4:b6:4e:90:38:80:d4:
00:ac:9d:f1:c0:c9:50:f4:f9:16:ba:a7:e1:9f:59:
6f:69:8f:67:24:a5:88:d1:b3:03:ad:ce:b4:a1:7c:
b9:f0:e8:a6:b9:2b:ff:4b:65:e1:84:2d:1e:da:b1:
8f:d6:71:ae:e5:b1:b6:35:81:f2:14:ef:98:d5:a5:
a3:24:36:39:c6:44:a0:8a:68:3e:6f:1e:f9:a0:6e:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202218
Signature Algorithm: sha256WithRSAEncryption
80:71:6b:53:14:18:fc:ff:99:c3:d4:92:3f:7e:e4:b9:a5:e6:
7b:6e:c1:b6:ed:5a:a8:7e:71:e6:ed:59:c0:e5:ea:00:4a:00:
63:f2:7b:01:1e:de:35:6d:25:75:09:d0:03:fc:13:a4:f2:60:
8c:8d:b6:75:35:6d:26:06:50:67:8e:52:bf:94:90:97:c2:b1:
89:dd:dc:aa:3a:2d:9b:27:90:41:d5:8b:70:2f:46:bb:a4:89:
2a:17:15:51:41:78:5b:89:bf:1d:10:c8:5c:7e:40:b0:49:0b:
2e:24:b1:03:ba:f7:2e:f9:c8:23:25:62:fd:38:14:e5:12:39:
04:69:d1:96:c9:41:3d:16:bf:ed:17:e6:6e:eb:51:d2:d1:89:
85:c1:b4:ad:58:79:82:9b:56:8e:d5:bb:26:99:b5:6a:db:e5:
57:bf:a0:e6:f3:43:c5:e0:d1:28:05:3f:d8:c4:cc:fb:1d:de:
16:c3:1e:32:ad:31:d2:c7:8f:17:4b:3d:68:08:56:44:4d:dc:
96:57:b2:8e:8d:41:0e:06:7f:04:d2:2c:db:22:6b:89:ca:0b:
6c:99:0a:56:a1:15:41:f7:ea:00:45:b9:91:c7:92:3b:79:30:
5f:db:2a:f8:6a:45:d5:02:f9:03:7e:40:6e:3f:f5:a0:86:c9:
72:8c:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:29 2025 by rpki-client