Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
File: _fnlz5EF-11F34wfudTxx6WQVMY.cer (raw, json)
Hash identifier: HdMR7Soxm1GsaKocTrmg0dp/V0CzDBaWWr574i5PLYA=
Subject key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748292656FA5917E93B544179185394
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209187
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:26:56:fa:59:17:e9:3b:54:41:79:18:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:13:13:4f:85:98:eb:52:03:12:3d:09:b5:
56:32:90:84:0d:bf:5a:9a:23:d5:2a:15:9a:bd:bb:
51:25:b3:ac:08:7f:cd:d2:ec:6c:15:fa:ba:e7:e6:
28:9e:ed:c9:a7:3c:75:f7:01:82:a4:c1:9e:b9:ec:
11:14:25:b6:3b:a0:d7:a9:f4:70:d4:35:31:70:9a:
c0:1d:8a:ae:72:32:e8:a4:97:83:e7:13:60:53:90:
40:c9:f4:bc:64:1a:2f:14:6b:df:8c:9d:63:ce:04:
36:e4:9e:8c:51:f3:77:2c:2e:75:76:d4:f5:a1:49:
6d:2e:9a:22:af:19:4c:2e:6e:39:c9:43:cc:48:1e:
b3:2e:36:34:71:fa:d4:b8:5c:0d:6a:8e:51:8d:0c:
08:f7:cf:d3:d7:d4:17:ed:4e:60:87:82:bd:f2:42:
84:a5:34:20:2d:07:16:11:f5:b5:e2:70:c5:0d:1b:
b5:2c:05:bf:89:38:1f:83:bc:71:88:12:da:c1:68:
48:6d:67:03:72:cd:2e:fd:fc:ce:22:59:e5:4c:58:
03:ce:b1:d1:41:7a:bd:dc:70:ed:0f:06:82:8c:d1:
4c:cf:e2:c0:ee:36:ef:81:11:71:f3:b2:45:ab:6f:
ad:95:87:02:b3:17:58:86:c1:29:f5:bc:4b:7b:c3:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209187
Signature Algorithm: sha256WithRSAEncryption
5d:f7:82:88:9d:b2:d9:a3:5a:a8:04:33:81:5d:89:df:76:c2:
da:f9:cd:9b:d4:d4:62:bb:f2:bf:60:62:a0:f1:a7:05:19:48:
bc:0f:d2:32:26:49:e9:4a:58:78:c1:cf:7b:7e:72:5b:58:77:
8e:13:c5:fb:3f:fd:1a:c1:2d:a9:c4:15:a5:8b:d9:40:e0:c2:
f6:f9:b5:6f:86:ec:af:68:73:97:cd:31:ba:b9:81:f6:b8:ab:
32:a8:34:12:56:bd:6c:e9:a7:d7:bb:b0:b2:ad:cb:26:ec:7b:
46:a5:0b:a1:70:24:94:f6:59:21:c3:2a:11:9a:79:ac:08:6c:
2e:10:3b:f9:d2:8a:1c:dd:d9:d6:6e:58:55:d5:e2:f7:3b:2f:
18:83:b5:7a:e1:8b:de:9b:9b:a5:8d:cd:0d:71:a8:f0:71:48:
c8:fe:8d:e2:f6:e4:58:29:31:e9:20:54:27:8c:79:d5:b0:31:
2a:e3:b4:52:0d:5c:20:a3:ba:82:cf:bf:14:43:8c:e7:b6:76:
a0:34:93:44:2a:dc:0b:7b:3d:a9:c4:0e:49:1e:b9:46:2d:23:
14:75:36:5e:bd:71:db:64:6f:98:57:5c:a1:ab:8e:ce:94:83:
db:44:55:74:50:ea:87:6a:8c:d9:b2:46:62:b8:89:f2:e4:25:
48:2b:3e:b9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQnSCkmVvpZF+k7VEF5GFOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGY5ZTVjZjkxMDVmYjVkNDVkZjhjMWZiOWQ0ZjFjN2E1OTA1NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0TE0+FmOtSAxI9CbVWMpCEDb9a
miPVKhWavbtRJbOsCH/N0uxsFfq65+Yonu3Jpzx19wGCpMGeuewRFCW2O6DXqfRw
1DUxcJrAHYqucjLopJeD5xNgU5BAyfS8ZBovFGvfjJ1jzgQ25J6MUfN3LC51dtT1
oUltLpoirxlMLm45yUPMSB6zLjY0cfrUuFwNao5RjQwI98/T19QX7U5gh4K98kKE
pTQgLQcWEfW14nDFDRu1LAW/iTgfg7xxiBLawWhIbWcDcs0u/fzOIlnlTFgDzrHR
QXq93HDtDwaCjNFMz+LA7jbvgRFx87JFq2+tlYcCsxdYhsEp9bxLe8MX6wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFP355c+RBftdRd+MH7nU8celkFTGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzA3ZDIy
OS03MDc3LTRiODAtOTI5NS1lYzBiNmY0ZDRhNmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvMDdkMjI5
LTcwNzctNGI4MC05Mjk1LWVjMGI2ZjRkNGE2Yy8xL19mbmx6NUVGLTExRjM0d2Z1
ZFR4eDZXUVZNWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMxIzANBgkqhkiG9w0BAQsFAAOCAQEAXfeCiJ2y2aNa
qAQzgV2J33bC2vnNm9TUYrvyv2BioPGnBRlIvA/SMiZJ6UpYeMHPe35yW1h3jhPF
+z/9GsEtqcQVpYvZQODC9vm1b4bsr2hzl80xurmB9rirMqg0Ela9bOmn17uwsq3L
Jux7RqULoXAklPZZIcMqEZp5rAhsLhA7+dKKHN3Z1m5YVdXi9zsvGIO1euGL3pub
pY3NDXGo8HFIyP6N4vbkWCkx6SBUJ4x51bAxKuO0Ug1cIKO6gs+/FEOM57Z2oDST
RCrcC3s9qcQOSR65Ri0jFHU2Xr1x22RvmFdcoauOzpSD20RVdFDqh2qM2bJGYriJ
8uQlSCs+uQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:38 2025 by rpki-client