Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer
File: aKUCPY4CESaZfXkmpHcBYIqs48c.cer (raw, json)
Hash identifier: WXTuE4Ip8K2TJ3Hhz1ejWiuLZog2qtVeigR/r5lUA78=
Subject key identifier: 68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3C7BB3E5E404256D7D621729776B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201991
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3c:7b:b3:e5:e4:04:25:6d:7d:62:17:29:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a5023d8e021126997d7926a47701608aace3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:08:72:0b:2d:76:1b:25:db:c7:6c:82:e4:
f2:2e:9e:d1:74:7b:5f:2c:c2:b9:db:94:19:cb:00:
2f:e9:2e:b5:d0:28:e5:98:23:0b:3a:53:73:f1:a4:
56:99:30:ce:34:cf:4b:3b:20:9b:d4:2c:4c:ec:a7:
cc:96:1f:60:11:2a:d7:60:ea:73:91:24:b6:87:06:
de:67:b0:67:69:c4:d9:73:37:ef:b3:a1:4d:08:f1:
75:1e:9a:e5:13:29:60:e5:c3:e9:8c:fc:f0:99:38:
bf:ee:69:c6:88:ed:e5:10:69:56:94:82:94:0c:9b:
f6:43:e4:e4:73:11:85:17:30:14:4c:92:f4:db:f1:
1c:84:76:a7:ee:8e:58:ca:60:2c:ea:7d:d8:a4:48:
a0:55:21:17:79:d5:e8:2a:86:df:af:d6:0b:c6:b9:
a4:8f:27:15:d5:a4:e3:cf:bd:f7:d7:a4:44:3b:d2:
25:b0:9c:04:c4:76:b3:c8:67:47:1b:68:eb:3d:cd:
af:de:e8:ae:29:e7:20:94:60:d2:94:99:14:09:4f:
b4:1f:1a:ff:bc:ee:8c:bb:71:d7:97:45:2f:fb:0c:
0c:26:a3:19:70:30:d1:61:b6:44:2a:b3:65:de:16:
ef:bc:4c:cd:b1:4b:89:fc:8f:d9:d2:09:34:8f:9b:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201991
Signature Algorithm: sha256WithRSAEncryption
3f:f8:6d:32:0d:17:5d:49:58:97:fc:03:4f:04:ef:be:8f:ea:
6a:42:12:4c:62:3f:ae:b2:eb:5f:ca:d9:f6:b8:86:c4:a7:4d:
7e:73:56:93:43:a5:7a:06:eb:6e:fa:2e:0f:f4:0d:59:7a:e5:
46:ec:33:48:1b:be:94:58:db:4c:40:b8:c4:85:78:68:24:ca:
97:8a:23:6c:69:35:c7:4d:0b:7d:e2:1c:8b:26:e8:0b:d1:b6:
31:8e:84:15:c8:3b:f3:e3:14:71:af:63:6c:af:f9:eb:f2:ce:
69:b9:4f:bb:46:31:5b:6a:13:dc:f8:bf:cc:69:cf:9f:fe:d9:
db:d8:27:1a:e0:fe:5d:1d:5d:01:70:89:81:d2:9e:96:d1:cb:
4a:ed:5a:4a:ea:00:bc:ba:d9:9f:8c:4a:e0:58:81:65:a9:87:
d9:a3:49:b5:4d:74:4e:04:53:87:0b:8f:b5:b2:06:26:3a:35:
b1:a2:68:29:95:de:50:79:f2:a9:00:a0:f2:96:30:fb:f1:f8:
62:d0:b1:92:4d:e6:18:13:a1:ea:16:00:ba:c0:b2:b0:6e:c4:
2e:cc:19:70:93:e0:cc:1c:5c:47:3e:0d:45:cc:fa:93:90:89:
e6:54:b1:3f:95:ee:6c:e9:44:57:3c:7b:20:f3:d3:f3:c7:1d:
75:56:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:26 2025 by rpki-client