Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
File: VZhirROQ5Nv4grUie8kzUPLYBxM.cer (raw, json)
Hash identifier: h6FBwanRdHJL+vWHeYf9dHMY2hIvo2KwevSSZab9Mq0=
Subject key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FCA193932039A3972401912FD3EC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204769
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ca:19:39:32:03:9a:39:72:40:19:12:fd:3e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:51:8c:19:51:8e:fa:17:e4:76:1c:13:f0:
e8:57:f3:d9:39:30:66:16:90:7d:f4:d0:67:32:8c:
8e:96:02:bd:ec:8d:30:7f:93:98:12:15:6a:20:d5:
8b:78:56:f0:0b:a5:2f:68:0e:a1:6a:42:a0:9b:aa:
2e:74:b2:f5:18:3d:23:49:75:6c:19:0c:aa:17:be:
8e:b6:75:de:14:3b:ef:a5:d3:d4:6f:09:61:c3:e1:
5e:fa:41:db:d2:df:4c:4b:67:38:ca:b8:87:e8:73:
71:ed:5f:12:5a:41:24:85:86:96:98:4f:d9:d4:49:
06:ba:0d:41:a2:ef:0c:7b:df:73:81:78:c4:f7:e2:
cc:31:ac:9a:f3:4e:5e:1e:82:82:59:f1:f6:4d:2b:
c5:aa:0d:c6:09:ca:25:0b:f1:0c:cf:31:5c:f5:a9:
51:f3:09:73:a9:24:2f:d2:eb:b3:9e:f8:85:bf:36:
e4:a1:f6:f5:3e:7e:dd:c9:2c:50:cd:49:3e:f0:29:
f1:de:c1:1d:76:5e:52:6c:70:01:f2:87:9b:80:cd:
6b:5d:fa:73:cc:a2:31:70:4f:9c:b2:af:72:ac:16:
e4:64:02:b4:ce:b8:04:e9:3a:a1:2b:74:b0:33:6d:
5b:8f:02:07:07:af:8e:62:b0:1c:5b:b8:a6:b9:61:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204769
Signature Algorithm: sha256WithRSAEncryption
59:26:ea:62:65:8e:8c:8c:1d:ee:60:4a:2e:aa:06:90:d8:18:
ac:98:8a:3e:f3:be:e5:86:1a:9a:ef:e9:2a:65:c3:6c:7a:7f:
31:9e:2b:4b:c4:0e:bb:2a:4a:a1:58:94:49:7e:5c:52:a5:38:
33:54:01:96:42:d1:df:de:6a:ec:9b:49:5e:8d:bd:e9:25:de:
57:39:c3:10:cf:63:03:06:bc:a4:b2:7f:65:14:ea:b2:b0:9c:
08:34:f6:9c:42:79:c0:d3:68:7f:b1:08:6e:96:88:a3:0b:4b:
34:51:08:90:f3:42:c7:b7:c2:02:33:81:93:1e:47:db:83:42:
75:b8:7d:76:dd:17:9d:05:16:80:e5:20:46:b4:d0:75:5e:75:
9b:66:cb:b5:e7:57:cf:13:41:bb:50:2f:03:8e:18:2f:b1:e2:
44:95:2d:dc:5b:c5:6f:66:4e:09:51:53:8f:f4:82:67:65:40:
79:52:a3:0c:65:8f:f9:ce:e1:d3:4f:ca:1c:a1:16:78:93:b0:
9f:96:68:e4:b4:c7:91:5c:38:29:e1:b5:cd:c5:ba:8b:c5:3c:
e5:97:0e:d0:1c:97:bd:56:d7:36:03:4b:66:da:c0:df:08:a7:
65:b1:2a:e3:cd:38:55:2b:17:82:30:c5:0e:12:06:a8:db:5c:
e5:2e:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:10 2025 by rpki-client