Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
File: _ME6qqHk6E6wwly5UOJp_z3bzuA.cer (raw, json)
Hash identifier: lDd9If+DzjdQskglMvXh4O/bWLL3CfZ1g1ueFYn/8hw=
Subject key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA3FFE4C2849CE9F79077ADA3B990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202275
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:ff:e4:c2:84:9c:e9:f7:90:77:ad:a3:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:47:ee:a9:e7:62:da:6f:ae:65:ff:8a:26:
08:cd:d9:63:35:ec:f2:cc:e3:17:28:66:c8:80:c4:
63:53:bc:e4:72:99:ae:cf:cc:51:0f:6d:01:9b:7d:
15:d8:37:61:b5:28:e1:78:d4:bb:e4:46:62:4b:f9:
93:6c:1f:bf:6f:0e:5f:db:cb:c1:19:e4:17:7a:f1:
36:1b:e5:52:e2:89:ce:5e:49:8f:81:f4:71:63:06:
64:da:53:68:3b:0c:d9:aa:ca:d5:6b:f9:85:4b:2f:
8d:7a:3d:a1:1e:5c:4f:9e:33:c0:1f:18:44:b0:f7:
fe:a7:3a:15:5b:d5:bf:39:62:b6:26:11:07:fe:a5:
a9:68:47:7e:88:06:e3:e3:4b:06:23:f3:4e:97:34:
b6:6e:a6:07:7a:d0:8c:89:25:ca:7f:29:a7:a0:09:
00:1f:3d:11:53:72:3d:48:41:f4:3a:fd:44:8f:88:
57:19:63:cc:d0:86:bf:2a:74:88:68:9c:08:14:7b:
ee:b7:b4:3c:62:21:be:19:72:8f:d7:13:b9:fe:a9:
23:07:56:3a:25:6c:df:53:02:62:9b:1f:c7:81:6b:
1a:4a:39:44:29:c5:dd:8a:48:fb:7b:45:f1:2b:03:
21:81:73:ef:6e:dd:40:23:72:e3:23:41:2c:8c:07:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202275
Signature Algorithm: sha256WithRSAEncryption
43:9b:11:92:a6:9d:63:84:a1:13:41:73:50:84:71:51:40:8a:
e6:2c:8c:95:d9:a8:83:d2:0c:2b:33:3b:29:b2:b6:17:cb:7b:
22:08:29:25:3e:77:28:32:f9:e2:39:32:17:2d:b0:7a:26:eb:
91:0d:56:1c:7d:a6:4b:2c:1f:a8:b1:23:25:a5:2e:ac:19:39:
a3:3e:d7:c7:a9:fd:a7:69:39:ea:a3:54:31:e4:e5:14:4f:da:
4f:59:80:37:da:a2:a2:f1:6b:8b:2b:11:6a:92:e4:3e:57:b1:
20:32:b7:79:59:d0:b9:8d:47:da:60:a1:97:43:5c:97:a2:d1:
5d:16:c9:a2:d7:0b:99:d0:11:5e:84:da:80:ae:a2:b1:6d:38:
9b:dc:86:de:c8:3d:d2:77:d2:5a:94:04:7b:02:25:24:c8:0e:
4f:a7:e0:53:fc:70:cb:36:aa:ac:26:30:8d:70:69:67:3f:ec:
19:2d:df:7d:65:b3:e9:f2:af:97:8e:c7:74:c1:b4:7f:19:31:
d6:9f:8d:40:7d:48:b6:8d:ca:a6:04:a6:6b:95:50:d7:cd:09:
cc:8b:00:5f:78:4f:32:2b:05:38:97:3c:72:b9:6f:86:db:f0:
8f:99:39:a2:a3:e6:64:5d:6c:74:9f:fc:9a:be:ef:c4:63:61:
a0:c2:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:10 2025 by rpki-client