Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer (raw, json)
Hash identifier: Ir0PsDKJp++zLIjrMB15VwhQFtNa+EzELLrT8s3eNss=
Subject key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C9DB950D7CBF0DDC4E43F013930A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206523
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:b9:50:d7:cb:f0:dd:c4:e4:3f:01:39:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:a9:7a:14:c0:64:7d:1e:6d:8b:db:4c:86:
d8:be:1d:1d:99:c1:3d:5d:11:f3:bf:85:c5:7e:e5:
98:2a:31:11:60:d4:5b:56:0e:1f:59:9a:70:c3:1d:
00:49:a3:ef:78:e5:92:4b:28:4b:e8:17:1d:cc:a4:
d8:d8:0e:4f:e3:14:83:88:48:ac:cc:3e:7c:6e:c9:
f6:ce:05:92:f1:c9:12:dd:21:71:e0:bb:57:a9:8a:
d3:59:1c:e4:fa:5f:be:eb:bf:18:bf:d3:73:12:b0:
46:e0:c1:ac:ce:d0:1d:1c:68:50:a5:ac:37:cf:10:
38:42:5c:08:76:a5:74:9c:f2:8a:af:b9:3e:3c:be:
f7:40:e4:68:46:4b:b4:cf:37:70:95:31:33:47:ca:
5c:33:6f:56:14:37:c6:c0:70:50:b0:c6:d7:a5:29:
6c:df:a8:cd:a5:b6:a6:69:03:b6:35:48:36:af:1b:
be:65:44:e7:1c:18:d5:69:d4:06:7b:c9:2f:24:99:
2c:23:bf:8d:b7:d6:41:66:aa:f7:d6:c2:6e:f3:66:
9a:6e:7e:9f:4c:85:95:8d:0d:ab:91:6f:5f:e8:8e:
5a:b0:d1:db:d3:1a:61:a2:2a:8f:8f:82:f7:cf:2e:
ec:5e:3e:83:fe:5b:56:3b:f2:e2:2a:30:db:0e:f4:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206523
Signature Algorithm: sha256WithRSAEncryption
a4:77:c2:e8:63:e4:aa:96:bd:b4:7d:75:c6:93:a2:dd:82:e4:
d9:4d:c6:c2:4c:d8:5d:a0:d1:2a:48:f0:e8:a7:f4:7c:fb:5e:
07:96:66:e9:c2:bd:20:4e:66:ef:6a:69:10:b0:9c:08:52:14:
80:61:30:36:b0:88:55:d2:98:42:43:f7:52:53:16:78:1c:4b:
af:be:20:55:7c:62:12:2a:49:7d:c3:0a:ba:1b:b9:8d:ad:7d:
1e:24:87:e7:77:cc:9f:33:a7:3b:36:9c:98:41:3a:30:46:2c:
da:08:47:f0:44:51:8f:d4:19:2c:cd:8f:a9:e4:79:0e:7f:42:
ef:6f:c9:11:66:6f:d4:43:b7:bd:b7:2a:e5:ab:ac:d2:e4:f4:
b1:28:17:ec:bd:b7:2f:13:cb:c5:8d:02:c2:5b:9a:25:b2:fb:
56:c6:be:21:ce:58:6f:84:d1:7c:6b:7a:40:03:d8:38:6c:bf:
94:93:8a:3d:00:45:2a:9f:06:7d:24:c3:ea:d3:0c:ea:7c:9e:
f0:e2:0f:18:34:6e:78:1f:9f:17:e9:f7:b3:5d:5c:7e:ee:85:
a6:55:5c:c6:e5:81:4d:c1:45:a1:39:26:70:88:02:c2:42:09:
dd:27:4f:35:69:3d:ae:c2:7c:25:23:d3:e8:fb:76:10:a5:a3:
e8:9d:3d:9c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQfjJ25UNfL8N3E5D8BOTCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2ZlMjZmOWE3YjIzZmJmMTE4MmRlNjJjM2FkNTIyNzYwYzMxNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M+pehTAZH0ebYvbTIbYvh0dmcE9
XRHzv4XFfuWYKjERYNRbVg4fWZpwwx0ASaPveOWSSyhL6BcdzKTY2A5P4xSDiEis
zD58bsn2zgWS8ckS3SFx4LtXqYrTWRzk+l++678Yv9NzErBG4MGsztAdHGhQpaw3
zxA4QlwIdqV0nPKKr7k+PL73QORoRku0zzdwlTEzR8pcM29WFDfGwHBQsMbXpSls
36jNpbamaQO2NUg2rxu+ZUTnHBjVadQGe8kvJJksI7+Nt9ZBZqr31sJu82aabn6f
TIWVjQ2rkW9f6I5asNHb0xphoiqPj4L3zy7sXj6D/ltWO/LiKjDbDvTnpwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPz+Jvmnsj+/EYLeYsOtUidgwxb0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2U3OGRl
ZC1lODkwLTQwZDItOThlMC0zMWEzNWRiMjAxZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZTc4ZGVk
LWU4OTAtNDBkMi05OGUwLTMxYTM1ZGIyMDFmOS8xL19QNG0tYWV5UDc4Umd0NWl3
NjFTSjJEREZ2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmuzANBgkqhkiG9w0BAQsFAAOCAQEApHfC6GPkqpa9
tH11xpOi3YLk2U3GwkzYXaDRKkjw6Kf0fPteB5Zm6cK9IE5m72ppELCcCFIUgGEw
NrCIVdKYQkP3UlMWeBxLr74gVXxiEipJfcMKuhu5ja19HiSH53fMnzOnOzacmEE6
MEYs2ghH8ERRj9QZLM2PqeR5Dn9C72/JEWZv1EO3vbcq5aus0uT0sSgX7L23LxPL
xY0CwluaJbL7Vsa+Ic5Yb4TRfGt6QAPYOGy/lJOKPQBFKp8GfSTD6tMM6nye8OIP
GDRueB+fF+n3s11cfu6FplVcxuWBTcFFoTkmcIgCwkIJ3SdPNWk9rsJ8JSPT6Pt2
EKWj6J09nA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:42 2025 by rpki-client