Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
File: aQetffrtuWAyDtF0BxUki4lasIQ.cer (raw, json)
Hash identifier: BhdlZq7ltUF3gu9ntQhNC1/cFytg/oEirSSc5MZ3vzw=
Subject key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC2A80DB7A94906FC3D3A5884F6226
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207475
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2a:80:db:7a:94:90:6f:c3:d3:a5:88:4f:62:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6907ad7dfaedb960320ed1740715248b895ab084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:02:97:a8:70:5a:06:f5:f3:86:38:f1:07:
d8:c6:43:4c:05:1f:7c:af:9b:54:53:2f:62:90:ff:
84:8f:0b:b3:5f:d4:9d:09:1d:f4:ff:88:3f:5c:6a:
aa:48:2f:b4:9d:bf:6e:16:2f:d1:c5:00:86:e3:45:
53:b5:74:14:ca:7e:19:a5:52:e3:a0:c1:f1:07:51:
6e:fc:c4:1e:a4:59:b1:4e:5d:59:1b:5a:b0:db:c7:
39:48:88:cc:47:7d:d1:fd:a2:db:04:86:87:8b:a1:
0d:ab:6d:f8:d8:10:77:b2:bd:b8:3b:13:f2:7e:58:
ac:54:3e:62:30:08:37:6c:19:ea:68:e2:a3:ad:84:
e5:9a:ce:6a:17:c7:3b:45:4d:62:17:9d:6d:91:95:
dd:f7:c0:1a:50:b2:ab:c2:c2:c2:4a:ed:0d:81:35:
60:de:d4:e1:04:bf:0a:ce:9f:94:e9:18:e0:6f:50:
73:8e:62:5f:8e:ed:42:37:b9:2d:de:40:50:64:59:
d1:ba:ec:b7:5b:b9:f0:cf:b2:c1:a3:38:84:da:13:
9e:ea:c0:ce:0c:d2:6d:17:0a:87:d1:ce:08:1e:ba:
9d:49:5a:4a:f2:2b:b6:91:80:13:21:3b:1a:e2:89:
5e:9f:c3:84:d8:16:4b:14:9b:73:97:d2:c9:70:dc:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207475
Signature Algorithm: sha256WithRSAEncryption
34:5d:b7:76:44:1b:36:a9:66:52:2e:0e:c0:68:c8:5a:59:72:
13:e5:8d:55:77:a8:18:f5:85:6c:d3:b3:7b:aa:b5:ad:97:c3:
17:01:b5:12:df:24:87:9e:e3:3a:31:6a:7b:f0:72:5f:5a:9c:
c1:6d:82:18:ae:13:14:a5:b3:21:f6:f8:fd:e1:ca:b9:c8:1c:
53:ff:51:b9:5f:32:e4:a0:fe:f5:df:de:11:44:5c:e2:ee:ca:
fd:19:ee:97:0f:d5:83:6a:cf:02:d7:29:5e:e6:be:60:46:1e:
7f:17:71:ec:80:0d:36:a5:c4:6d:0f:b8:93:8f:cf:a5:08:c0:
69:7a:27:8a:ad:dc:a7:f1:90:c3:c8:09:d6:68:5e:18:ae:9e:
d5:bd:dc:34:23:fd:7e:2b:7a:32:58:26:43:b9:3b:4a:d9:42:
8b:ce:7e:23:6a:fa:5e:b9:f0:f0:89:d4:6c:0b:dd:1f:b9:7e:
f5:3b:a8:c0:21:13:c6:50:d0:1d:02:fa:dc:de:98:7c:1e:d4:
7b:02:44:08:d0:55:ff:ba:d2:aa:66:c4:cf:48:00:54:01:2c:
d1:ab:42:df:56:7d:67:d3:11:5f:57:0d:28:08:8a:fe:b7:b6:
75:d1:a5:9a:97:9b:0d:a0:f1:8a:d5:f2:23:18:d4:6b:b5:4e:
ef:6a:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:56 2025 by rpki-client