Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer
File: _zZQWJdnAfshmkFt2OfvSAokiIY.cer (raw, json)
Hash identifier: lvd5M4nmhb+oULkxxJaBdsMtHnT0UqaqV235rP6U5q8=
Subject key identifier: FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5C49E5A8263B94D30C05B79B3D143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215885
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c4:9e:5a:82:63:b9:4d:30:c0:5b:79:b3:d1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff365058976701fb219a416dd8e7ef480a248886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:9c:a1:97:1c:d7:ee:10:5d:6f:3a:3e:1b:
e1:da:c7:80:a4:d6:92:24:34:93:91:3d:12:06:a0:
ec:0e:7d:d7:57:2f:47:9e:43:ed:1f:dd:ca:3d:78:
a3:0d:8a:a6:78:9a:42:a9:81:a1:79:2a:74:b0:8d:
0c:21:d8:45:bc:cc:1d:d1:a9:9c:40:dc:11:ea:8c:
c8:78:83:68:9c:e3:c5:82:a8:c5:f8:ce:9b:d4:37:
12:35:62:29:d8:d5:46:76:b0:2c:55:3e:4d:33:ac:
1c:e2:fc:20:1e:c5:bd:b1:3b:c5:b7:11:61:d8:ae:
71:a1:0a:24:fd:64:ea:cb:c2:15:5c:5e:0b:4a:3e:
81:5b:df:3d:63:5b:ca:45:00:ba:7c:ff:f1:c5:fb:
5d:64:44:5f:2f:d3:df:d7:17:e2:fe:65:79:21:4a:
8b:81:61:63:58:e6:28:08:fd:bd:27:8d:82:01:b0:
35:a3:72:58:25:f0:3b:70:54:32:ee:f9:da:01:12:
b1:3a:54:0c:26:f1:db:de:0a:8d:1a:80:64:b6:79:
9e:cd:ea:35:89:66:29:3f:14:dc:05:71:4c:7d:f9:
60:09:26:d1:9a:75:85:a2:64:c6:8d:f2:f6:4f:bb:
bf:ae:6a:e9:1c:10:dd:3d:9d:76:91:b6:c2:08:26:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215885
Signature Algorithm: sha256WithRSAEncryption
9a:0a:94:0f:1e:30:5f:4d:2d:6c:f9:f5:a2:69:56:54:f6:5d:
f9:b8:e1:19:c6:b3:36:f9:c1:66:6d:11:b6:b2:b1:ef:36:b0:
65:29:bd:0c:9e:2e:fb:05:79:9e:6e:5c:b1:b4:54:b7:86:61:
8c:c7:3f:84:0d:31:0f:bb:70:0a:6d:dd:cc:ad:ee:3e:28:15:
e3:29:64:87:aa:fd:a2:91:0f:73:af:7f:44:bf:b9:02:8b:c3:
03:fd:47:61:66:84:58:4f:b1:48:be:52:5e:19:ef:ce:ba:58:
8c:b1:80:9e:a3:30:74:55:1d:8c:76:5e:00:5c:6c:ba:ab:5f:
66:77:2e:d4:ab:eb:7e:c7:9e:32:89:73:64:11:ba:e0:77:f8:
7c:7c:38:41:95:71:f5:87:08:58:fc:0f:23:d3:b0:21:87:4f:
33:52:ab:2c:aa:70:01:0c:8c:8e:63:d4:4b:8c:ab:ce:bd:be:
0a:e8:08:be:7c:bd:73:30:f8:f5:a6:b4:ee:4d:7a:ea:05:1b:
b1:25:a1:4e:cf:a8:e0:48:73:8e:c4:c4:9e:4c:ae:8b:7c:64:
0a:8b:2c:6f:0d:9b:c6:46:88:49:db:a7:2a:b1:15:8c:10:af:
1b:77:c3:a0:c8:ff:61:4e:4a:f7:4b:ed:c1:96:8b:f5:3f:32:
7b:7c:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:03 2025 by rpki-client