Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
File: ZZA_X17-WJPdatiYYsRzddMePUA.cer (raw, json)
Hash identifier: liPwIYtSyRkdUe9SEr8NujjyLTjeSGBDh3oNsmU6Z88=
Subject key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143FE2AA6EF35971CBF41BCAA991D95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200447
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:2a:a6:ef:35:97:1c:bf:41:bc:aa:99:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:d9:a3:22:b4:a6:6e:32:d9:70:b9:d1:09:
51:9c:47:fc:bb:a6:f3:ab:13:69:7d:3d:e5:0e:38:
53:fe:5d:5e:cb:d7:e1:98:e6:58:a7:07:a1:73:cb:
99:fa:fb:9c:b9:54:64:e3:2e:ea:8a:41:54:6b:44:
e2:c0:f5:ef:0e:91:69:97:ba:a5:65:36:53:a2:a0:
1b:52:ab:70:d5:18:ab:80:27:c7:89:54:03:e8:a4:
78:e1:02:35:cf:a4:26:3f:0f:37:5a:a6:6a:a7:40:
58:b9:58:61:db:b3:06:58:77:9a:5e:80:8b:b5:26:
b4:62:5d:37:55:6c:c6:12:24:1d:e5:54:05:a5:ae:
26:a5:24:ac:b3:35:c6:15:10:0f:17:78:96:4c:6c:
ab:4d:c8:c5:e8:6b:47:51:5e:bb:43:26:f5:36:ac:
31:c9:7e:c1:e7:5a:dc:a6:fa:9e:36:d0:44:65:0e:
41:a4:97:2e:9c:71:db:b5:a4:12:e5:3e:84:e7:bf:
22:ad:1b:1a:53:60:ae:c2:32:31:98:47:46:4c:a2:
2f:18:12:56:23:da:73:30:7d:ca:13:29:75:cf:e4:
69:00:4f:f2:6c:68:6f:4f:eb:86:72:4f:62:60:0c:
06:d9:c1:64:bd:36:1d:d6:7f:d5:8a:d7:84:8e:d1:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200447
Signature Algorithm: sha256WithRSAEncryption
2e:3d:0e:dd:0e:d2:d9:aa:47:19:58:b8:19:c9:42:99:71:b2:
5e:88:1a:44:ad:93:49:3c:38:bb:7f:f1:d8:d8:21:3c:99:2b:
1d:a2:ed:6d:2d:58:3c:76:fe:aa:21:ec:fc:88:68:ea:30:32:
9c:12:cf:ea:57:e9:28:84:7b:a7:97:e1:a4:0c:96:5c:81:cb:
17:1a:ef:60:bc:a6:46:ba:3b:91:f9:c7:b0:c8:99:ce:a0:49:
5b:38:ed:23:bf:1c:ba:1e:41:7a:a7:a0:9b:c5:3b:ae:9c:08:
f7:59:7c:39:c2:d7:ac:98:23:40:8d:96:60:e9:97:24:7e:ff:
a8:70:89:37:0a:a7:d1:f2:28:e7:cb:7e:c0:9e:ce:21:f0:80:
e0:6f:15:f8:d9:44:61:55:6f:9d:b9:85:ed:cc:53:7b:46:16:
fd:9d:e6:cb:2f:cd:06:2d:03:e7:82:64:f1:be:9b:eb:67:33:
f7:9d:13:52:68:9d:5b:41:47:e8:77:e6:d7:ff:ca:79:b4:35:
53:4a:9c:45:12:cc:bc:56:68:43:8b:ee:b5:17:db:b4:0e:57:
7c:33:24:8d:ac:db:c0:ad:96:41:dd:bc:83:2b:f5:21:2f:c1:
62:42:e6:b4:5e:f3:62:fc:6b:37:3a:55:15:b5:d9:20:aa:22:
9e:fe:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:49 2025 by rpki-client