Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
File: b27JJY79ACkhePqBwjzXfAKhoRA.cer (raw, json)
Hash identifier: x6bm2P4Zk7CGqo0hYQ1XiLUrOtfpp91XbmrrOyCEFzQ=
Subject key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24CDA6EE2FFE41072A58164FF4892
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206810
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:da:6e:e2:ff:e4:10:72:a5:81:64:ff:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:14:20:25:b8:d4:12:00:dd:87:93:68:9b:
d3:ff:8a:f4:ef:b5:63:c1:82:31:f3:1e:86:e2:cc:
b2:68:c3:ac:fc:f8:5e:77:cc:42:91:53:a7:85:78:
66:60:31:55:4a:06:56:b0:a0:3f:8c:b4:3e:ca:31:
16:c2:66:94:8d:a4:bd:1e:83:fb:fa:20:ad:d6:4e:
3f:f9:85:c2:e3:ee:3f:5b:b2:c3:c1:7d:5f:1f:07:
f9:6b:43:6c:d7:a9:8f:db:ac:a4:a8:b4:1e:b2:85:
c1:12:0b:3a:eb:10:e9:a5:0d:b3:bb:8b:5c:db:0a:
4e:e8:e8:75:39:dd:7b:6a:f8:70:61:53:72:80:64:
e7:b8:d2:d7:fa:a0:0d:a8:f3:c2:e8:d9:58:80:d3:
17:fd:9d:88:55:0e:46:e9:b7:49:fb:82:1b:f5:b9:
3c:5a:07:77:31:b5:91:a3:9d:b0:d4:4b:57:6a:fe:
71:5f:ac:ee:d2:5b:b4:09:8e:65:bb:33:76:41:d3:
fc:12:09:8e:7b:63:b4:1e:0e:59:d8:4f:8c:92:49:
e4:ac:19:e9:1b:4f:b8:7d:7a:3b:be:ec:ea:9b:7c:
c4:42:d9:93:41:f1:30:7a:44:69:a9:7f:cf:ed:6d:
e8:5e:fb:84:b9:9e:55:3d:00:11:5c:8e:b9:50:1f:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206810
Signature Algorithm: sha256WithRSAEncryption
81:df:b0:8d:08:fa:1a:60:ed:5e:86:e6:a7:fd:33:1a:33:42:
a2:98:05:c5:d7:d3:43:41:8b:7b:ca:08:1c:bb:bd:29:04:fe:
e8:25:8a:61:20:d0:67:60:ed:f0:33:f7:d6:52:ec:3f:1f:27:
d8:3f:08:e6:a2:8f:9d:c1:e9:78:ee:94:a5:b4:55:24:0e:20:
d4:66:86:42:fc:58:3c:d6:7a:8b:4b:35:2d:30:e7:1c:93:3a:
88:ae:6e:94:49:bd:35:2f:48:d7:16:a4:ea:9c:ad:47:3b:be:
3b:06:1c:ad:6c:61:aa:f2:bf:f0:49:bc:55:41:cf:56:a9:de:
67:7b:ce:81:c0:a0:d7:f7:91:01:35:7f:68:89:f2:25:2a:7d:
58:7a:02:e6:b6:b2:a6:f1:9f:4a:a4:00:91:c9:fb:07:81:59:
d9:a1:e7:dd:e9:4e:59:13:1a:69:3b:b1:74:0e:4a:94:f5:43:
fe:ce:fa:a3:3f:ed:8f:6a:7c:d2:64:63:14:76:bb:18:78:ce:
16:fd:11:21:a7:b1:a0:1d:b3:32:a9:5d:17:e2:56:95:11:e5:
44:e1:25:8c:08:d8:54:1b:37:bb:fc:02:dd:6d:9b:23:8e:ba:
f9:45:5d:61:98:54:a2:5c:74:85:f1:60:17:6e:04:29:e7:b5:
27:e7:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:01 2025 by rpki-client