Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
File: Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer (raw, json)
Hash identifier: SHuAmTCd5e1SM6pd/9yk9A3OqM/9ERer7BjHee6arvI=
Subject key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D60FFE47D81C9BE62F38C2B170353F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204291
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0f:fe:47:d8:1c:9b:e6:2f:38:c2:b1:70:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:b6:cf:0c:1d:e2:64:a4:40:02:f8:51:fa:
ae:bb:bb:57:f5:04:13:24:72:8d:7f:77:ba:72:e2:
a6:30:c7:c4:4c:d3:35:42:68:d1:97:6a:6f:23:8c:
c3:80:8b:16:56:13:aa:53:a1:53:f1:6a:59:f7:60:
5d:8d:84:60:ba:39:e2:4f:44:ed:c4:02:05:72:9e:
32:a6:a1:ea:94:b7:1b:2a:7e:d7:02:61:39:28:51:
56:c1:1c:97:14:7e:44:e5:06:8c:8e:fb:f4:0a:1c:
6e:be:8d:6a:fd:69:af:4c:b0:f0:31:4b:cd:f4:00:
04:07:e8:cf:a2:ae:ee:4c:9b:23:be:d8:8e:3b:60:
9e:0a:83:de:63:a5:33:ee:60:4c:91:92:59:36:7d:
c5:cb:f9:c9:46:04:e8:53:52:e3:be:20:29:e5:6b:
76:ee:28:58:f7:97:b8:b7:36:c6:60:e9:4f:41:59:
72:b9:7d:84:4b:ef:d1:38:0d:6d:71:16:83:9b:0d:
0e:bc:1a:ff:c5:c8:fe:74:c1:2e:77:30:16:19:57:
4b:d1:4e:55:5e:ec:4b:21:35:32:b7:2e:9d:ac:12:
19:a6:43:4c:e2:9a:8d:35:70:d3:17:ae:91:34:f4:
52:bc:56:aa:bc:2a:f9:33:33:90:65:35:ed:3d:13:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204291
Signature Algorithm: sha256WithRSAEncryption
aa:4f:11:a3:6e:82:89:c5:a9:a7:50:34:4d:96:3a:b6:3f:46:
f8:a2:a5:29:37:ea:72:08:09:7b:d6:54:3d:11:31:21:03:b4:
32:62:76:6f:f5:49:02:fd:d8:48:eb:2c:b2:51:d7:3b:19:42:
81:92:41:e1:24:d9:af:1b:fa:9a:8f:da:e5:f6:30:cf:70:41:
6a:f4:a9:94:cd:b3:da:56:8c:00:9d:c8:50:c4:df:49:b5:1e:
c8:6e:ce:bf:18:5d:4d:41:c0:50:d9:57:85:e2:44:4f:22:63:
fe:22:db:10:14:cf:bb:41:67:60:e7:44:3b:d7:a2:a9:00:bb:
83:ad:d1:72:d4:f2:9d:45:d5:31:19:d0:36:f5:54:16:08:46:
3f:02:de:b7:23:1f:6f:58:e3:58:18:4b:2c:c7:a3:31:d4:ea:
8a:df:b0:f3:aa:8d:5e:59:3b:ea:d2:c3:7d:d3:f8:b4:b3:af:
08:e0:16:e6:a9:24:bf:44:29:67:34:a5:49:5e:5e:4a:5c:c3:
4b:37:59:fc:2e:c5:9a:42:68:f1:d7:2e:5e:4e:97:ba:44:3a:
d5:86:1b:5f:9b:88:14:e5:7e:58:57:76:ce:8b:8b:b6:56:56:
a8:37:2f:af:84:8b:62:20:1e:b6:2d:90:f2:ca:f1:2a:89:39:
c9:8a:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:37 2025 by rpki-client