Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-BodRu9xkUKIUa4VBshlMKcgAk.cer
File: _-BodRu9xkUKIUa4VBshlMKcgAk.cer (raw, json)
Hash identifier: srK754AdFA5teVQPQ+uudeqNBZ3U1axidB0HoI7BKS4=
Subject key identifier: FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942522311E1BD6C3A88115359B80C7B7C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215136
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:31:1e:1b:d6:c3:a8:81:15:35:9b:80:c7:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffe068751bbdc6450a2146b8541b2194c29c8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:10:79:16:08:65:ab:35:cc:77:65:a0:b3:
09:a4:61:ec:3a:6b:14:5c:b7:ed:78:fb:1f:bb:da:
37:ec:46:18:fd:c2:59:43:f0:88:f0:f0:0f:81:df:
cf:84:29:09:1b:f0:0e:a6:d3:d5:c1:e1:86:1c:77:
d5:81:36:dc:71:9d:4e:3d:c2:fc:71:de:7f:f4:a4:
7f:27:9c:18:0f:4c:f9:44:46:eb:47:d5:f5:e3:bd:
ce:83:0e:b1:7b:ba:0e:e9:bb:14:e0:1b:61:ad:c6:
d9:df:d4:52:16:5b:b1:d6:d0:25:6f:a9:00:12:e2:
e8:d2:c1:c2:c8:ba:4d:f8:74:ef:ac:02:c1:56:6f:
7b:1f:1e:89:6a:de:9f:db:0b:18:67:96:f8:d3:b7:
d2:e8:ed:36:82:e0:77:e8:5a:61:2c:b4:fc:8e:d2:
92:2b:61:d1:34:06:e7:f7:8f:fe:6b:03:5b:7d:fa:
43:80:d3:9d:34:b6:05:88:80:0f:ca:4e:fc:0b:2f:
a5:ec:e7:60:76:27:f6:2f:a2:41:ca:6f:ac:db:93:
4c:52:ed:e6:14:b7:ea:6a:74:4e:96:57:07:6f:80:
57:e8:33:f6:30:6b:a3:0f:c5:6d:5f:2a:ab:64:8f:
d8:d7:ff:4a:35:6c:74:f3:d9:df:cd:21:ca:1e:09:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215136
Signature Algorithm: sha256WithRSAEncryption
26:5a:99:e0:3b:84:82:19:4a:fe:90:c4:d5:ae:3e:13:87:f3:
ee:1f:3f:6a:f5:c7:3a:7f:d0:d9:a7:ef:20:25:b6:d1:f8:55:
03:00:09:e8:63:00:2f:31:87:fc:1a:19:b6:bc:2d:ea:b2:39:
ef:ea:df:e7:7a:2b:b5:65:a1:df:63:f3:94:f0:73:70:a9:56:
0e:6e:1a:19:65:40:10:c8:c9:e5:3f:8d:e6:73:b0:1c:07:1c:
8b:bf:aa:21:a5:bc:22:11:ae:e2:cb:28:4b:59:2a:44:13:fc:
0b:c4:b8:32:27:95:82:73:a3:b8:ee:cd:6e:59:bb:72:55:0e:
8b:8d:ab:15:c9:ed:35:2b:23:52:2c:f6:16:e4:a6:f4:5c:80:
b9:59:11:e5:af:c9:4a:63:79:4c:ee:c5:f2:15:77:3c:31:b1:
e5:cd:5b:d1:bc:16:55:34:fc:c5:74:e9:0a:20:b7:5c:6a:31:
3a:51:54:d3:6f:9b:92:e0:13:c0:a3:d5:6c:5c:8b:a7:c4:3b:
ce:98:bd:f9:05:89:ca:d1:62:5c:5c:0a:30:dc:b7:1e:79:f5:
30:40:ab:9c:c4:80:1e:53:37:a9:72:40:20:32:44:b0:df:f6:
72:94:94:00:f3:60:d7:8d:5e:37:26:d5:12:f2:ee:28:8d:fa:
f0:98:b9:3b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQlIjEeG9bDqIEVNZuAx7fCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmUwNjg3NTFiYmRjNjQ1MGEyMTQ2Yjg1NDFiMjE5NGMyOWM4MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fwQeRYIZas1zHdloLMJpGHsOmsU
XLftePsfu9o37EYY/cJZQ/CI8PAPgd/PhCkJG/AOptPVweGGHHfVgTbccZ1OPcL8
cd5/9KR/J5wYD0z5REbrR9X1473Ogw6xe7oO6bsU4BthrcbZ39RSFlux1tAlb6kA
EuLo0sHCyLpN+HTvrALBVm97Hx6Jat6f2wsYZ5b407fS6O02guB36FphLLT8jtKS
K2HRNAbn94/+awNbffpDgNOdNLYFiIAPyk78Cy+l7Odgdif2L6JBym+s25NMUu3m
FLfqanROllcHb4BX6DP2MGujD8VtXyqrZI/Y1/9KNWx089nfzSHKHgnRkwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFP/gaHUbvcZFCiFGuFQbIZTCnIAJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2U2Mjg1
Yi1hYmQxLTRkNzYtOTg0NS01NDhlZjM4NDUyNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvZTYyODVi
LWFiZDEtNGQ3Ni05ODQ1LTU0OGVmMzg0NTI2OS8xL18tQm9kUnU5eGtVS0lVYTRW
QnNobE1LY2dBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNIYDANBgkqhkiG9w0BAQsFAAOCAQEAJlqZ4DuEghlK
/pDE1a4+E4fz7h8/avXHOn/Q2afvICW20fhVAwAJ6GMALzGH/BoZtrwt6rI57+rf
53ortWWh32PzlPBzcKlWDm4aGWVAEMjJ5T+N5nOwHAcci7+qIaW8IhGu4ssoS1kq
RBP8C8S4MieVgnOjuO7Nblm7clUOi42rFcntNSsjUiz2FuSm9FyAuVkR5a/JSmN5
TO7F8hV3PDGx5c1b0bwWVTT8xXTpCiC3XGoxOlFU02+bkuATwKPVbFyLp8Q7zpi9
+QWJytFiXFwKMNy3Hnn1MECrnMSAHlM3qXJAIDJEsN/2cpSUAPNg141eNybVEvLu
KI368Ji5Ow==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:28 2025 by rpki-client