Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
File: Vq94S7xmnB23aovR0emTk9jyF2s.cer (raw, json)
Hash identifier: EmyoSLKP+oPZNBJ1c9L4Egj/oYv0PfwJVe8+xM17hss=
Subject key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445ACFD16948F1EBF7A2DF4256C499
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210878
AS: 211306
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5a:cf:d1:69:48:f1:eb:f7:a2:df:42:56:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:f1:fb:5d:7e:c5:3f:7d:dd:eb:e8:86:e1:
9c:91:66:b9:57:86:42:1e:23:ca:e5:b1:b3:aa:cb:
fe:33:8d:b6:e4:11:8c:2a:1a:1d:90:8d:2e:f0:51:
77:7e:51:31:78:3f:64:08:29:b4:ef:88:78:4c:68:
45:c7:90:34:35:0b:8a:60:01:cd:59:09:9a:06:7f:
a0:e9:90:1d:00:8a:f8:63:ed:5b:26:18:e8:1b:1a:
6a:de:cd:57:48:a4:e5:44:83:d7:f3:40:7a:9f:00:
de:f1:05:6f:31:ac:f4:57:eb:e2:6d:5a:e6:81:73:
ef:d4:c6:26:b8:d0:60:58:2e:8a:b6:c4:94:a1:cc:
79:99:8a:5a:3f:81:66:a1:07:30:5a:52:38:08:8d:
85:ec:19:1a:5f:41:e0:3d:f7:f2:22:f3:e9:ca:3a:
34:3c:a5:f1:e0:77:ee:e9:eb:e9:b5:b9:98:1f:4a:
e7:4e:5d:b1:07:f4:d4:30:9a:d5:93:59:d3:fd:96:
ff:29:28:fd:8e:61:e2:a1:0b:ec:6a:63:2b:24:50:
cc:68:cf:cb:e3:a9:2b:af:20:b7:85:1e:cc:b7:7d:
62:30:ad:3b:4c:17:e3:7a:19:f8:f6:f3:3c:98:03:
e9:4d:e2:e8:ba:8a:92:86:23:e8:3e:55:04:80:2e:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210878
211306
Signature Algorithm: sha256WithRSAEncryption
18:9a:ab:f9:76:26:8b:53:76:23:1d:50:23:b1:dc:34:b9:cc:
e9:47:ae:55:0e:1d:b9:d4:78:98:eb:9f:10:83:41:3c:fa:e5:
d4:ed:48:a6:30:02:e5:7c:fe:1f:a1:60:ff:0a:14:24:22:19:
d7:79:f9:f0:99:11:44:88:8e:99:f3:49:e9:85:f4:a9:2a:e5:
22:8e:43:46:d5:25:3e:3c:23:ea:b7:0f:b6:5d:44:df:30:b1:
77:b4:1a:87:0c:fc:00:50:33:2e:7f:cf:17:7d:22:d8:20:31:
f2:13:fb:3f:99:13:09:23:f3:4c:6f:1d:c6:b8:c3:64:21:cd:
d3:ef:26:e4:24:f0:ba:e3:15:12:58:8c:51:e1:d5:eb:6c:57:
df:b5:85:94:a5:17:04:4c:46:b4:d9:1d:e9:77:07:9c:50:fd:
ab:0b:a1:cf:c1:f0:a9:20:e2:7b:59:a2:a4:c3:2d:bb:fb:77:
06:24:6d:a3:46:4a:49:e2:2f:01:01:d2:55:06:29:12:28:e3:
23:e1:6f:fa:0a:f8:df:f4:26:53:61:0e:7f:5c:2c:e1:c5:e2:
b9:f8:80:3c:fd:8e:25:39:30:e0:db:08:67:fb:46:d9:8b:69:
d5:c5:17:44:2e:16:de:94:5b:37:d3:bb:dc:8f:bb:09:fe:71:
36:d4:63:96
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRFrP0WlI8ev3ot9CVsSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmFmNzg0YmJjNjY5YzFkYjc2YThiZDFkMWU5OTM5M2Q4ZjIxNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim7x+11+xT993evohuGckWa5V4ZC
HiPK5bGzqsv+M4225BGMKhodkI0u8FF3flExeD9kCCm074h4TGhFx5A0NQuKYAHN
WQmaBn+g6ZAdAIr4Y+1bJhjoGxpq3s1XSKTlRIPX80B6nwDe8QVvMaz0V+vibVrm
gXPv1MYmuNBgWC6KtsSUocx5mYpaP4FmoQcwWlI4CI2F7BkaX0HgPffyIvPpyjo0
PKXx4Hfu6evptbmYH0rnTl2xB/TUMJrVk1nT/Zb/KSj9jmHioQvsamMrJFDMaM/L
46krryC3hR7Mt31iMK07TBfjehn49vM8mAPpTeLouoqShiPoPlUEgC48xQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFaveEu8Zpwdt2qL0dHpk5PY8hdrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2RkMTdl
OS0xOTM1LTRhOGUtOGRlMC01NWU5OGUyNWZjYWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZGQxN2U5
LTE5MzUtNGE4ZS04ZGUwLTU1ZTk4ZTI1ZmNhZC8xL1ZxOTRTN3htbkIyM2FvdlIw
ZW1UazlqeUYycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwM3vgIDAzlqMA0GCSqGSIb3DQEBCwUAA4IBAQAYmqv5
diaLU3YjHVAjsdw0uczpR65VDh251HiY658Qg0E8+uXU7UimMALlfP4foWD/ChQk
IhnXefnwmRFEiI6Z80nphfSpKuUijkNG1SU+PCPqtw+2XUTfMLF3tBqHDPwAUDMu
f88XfSLYIDHyE/s/mRMJI/NMbx3GuMNkIc3T7ybkJPC64xUSWIxR4dXrbFfftYWU
pRcETEa02R3pdwecUP2rC6HPwfCpIOJ7WaKkwy27+3cGJG2jRkpJ4i8BAdJVBikS
KOMj4W/6Cvjf9CZTYQ5/XCzhxeK5+IA8/Y4lOTDg2whn+0bZi2nVxRdELhbelFs3
07vcj7sJ/nE21GOW
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:22 2025 by rpki-client