Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
File: _08LNYy9bFTsy-vyb20aBfHVN-g.cer (raw, json)
Hash identifier: jqXVA6YldhBGtQ6szRooipylg2m1OOtU1OIupzEoRFA=
Subject key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214428C40ADEAE594C5C85075A019DC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214312
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:28:c4:0a:de:ae:59:4c:5c:85:07:5a:01:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:85:b7:ad:74:b9:74:37:83:cc:fd:2b:ac:
83:a8:16:92:60:b1:a8:95:2d:0e:b4:cf:3a:96:d7:
b2:76:57:09:80:de:76:2a:cf:72:e8:67:55:a6:d8:
c9:83:21:46:f4:57:6b:72:99:72:b6:cd:01:9e:d2:
62:12:f7:30:e9:db:fa:e3:40:08:68:4a:bc:41:ab:
10:c5:c5:9e:b0:85:26:1c:f4:8d:4b:33:85:7c:4f:
0e:e3:34:36:61:55:32:a0:7f:fa:8b:91:06:f2:19:
17:55:94:d4:b1:6e:4f:b0:e9:60:e0:43:44:4f:8d:
79:44:a2:b7:37:43:aa:49:e8:a4:af:52:a0:bc:b4:
80:cc:4b:9d:4b:e4:b8:56:72:5d:41:83:34:26:fd:
4e:e8:85:41:e0:de:19:9f:21:d5:fd:52:5e:a1:b1:
4c:fe:f0:81:53:8e:de:c6:64:4c:d2:4a:02:42:6d:
ef:49:6c:45:70:6c:72:68:47:d0:58:bd:b2:ef:a7:
da:07:33:43:49:16:05:53:85:6f:fb:74:bf:27:dc:
25:d2:85:63:11:fc:d8:d9:db:ef:f1:19:9d:6d:92:
bc:cc:16:0a:74:a8:84:5e:83:06:36:04:59:4b:9d:
a1:05:63:aa:07:dc:1e:8b:e2:28:e7:85:03:cc:fd:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214312
Signature Algorithm: sha256WithRSAEncryption
93:5c:e6:5f:7f:86:53:c7:64:50:78:9d:ae:1e:9e:3d:9f:50:
f0:b5:ca:17:81:70:c8:32:61:23:d8:01:75:e2:1e:87:51:79:
02:d8:24:ff:17:67:d9:64:97:0f:ff:09:07:2f:1f:f8:27:34:
94:e5:d1:6b:31:d9:83:a4:5c:51:79:de:a8:a0:8f:e7:c0:86:
41:ef:f0:1f:7c:a7:e5:e4:f2:1b:98:d8:ad:82:35:d1:ee:ef:
1d:a1:95:d8:58:1b:23:be:50:2e:71:b9:d1:02:7a:ec:36:58:
54:13:17:5b:d6:d1:75:84:b6:77:96:21:ed:9d:cf:13:e1:1f:
4e:5a:86:6b:33:ee:bc:06:94:a3:30:c1:aa:34:24:6b:17:72:
17:4a:23:78:cb:88:92:25:00:ec:98:53:15:9e:7e:ad:8f:5b:
e0:9d:bc:37:fc:10:7f:0f:a4:61:92:f1:2d:7e:4a:e3:6e:b0:
7a:ae:d2:ef:40:f9:e2:d6:95:2f:c3:ae:a6:ce:ba:9d:54:cc:
ff:b9:cb:d7:c3:99:d1:5d:be:d6:9c:79:79:da:f6:5a:2e:19:
98:48:b6:01:7a:4d:4e:7b:c8:5b:13:69:40:58:b1:e6:56:9e:
76:45:ac:60:0b:00:51:5b:00:b5:f0:7d:e7:6b:f1:db:5d:ff:
59:08:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:44 2025 by rpki-client