Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer (raw, json)
Hash identifier: XD/nUj5O9HQ5c9vFQCa2+qOUZmQ33UPcOsyRc1erdqY=
Subject key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423692C842C2CC99FC488954A568B367A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214460
IP: 2a14:74c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2c:84:2c:2c:c9:9f:c4:88:95:4a:56:8b:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:b7:b6:37:be:79:54:78:08:18:33:30:a4:
18:61:b3:5a:cc:be:d3:5a:ba:bb:16:ba:ae:e7:13:
76:1d:fa:3a:60:59:16:56:cd:22:fc:0a:20:63:cd:
de:90:d4:5a:7b:8d:36:7c:d7:c5:f0:b1:d4:9f:f4:
49:b4:28:73:a3:bb:58:c6:53:26:5f:72:12:66:90:
b5:89:f4:a6:0e:54:7b:15:eb:75:ba:2a:f6:84:46:
24:78:b1:ac:70:00:75:80:51:29:9a:2d:df:af:81:
16:69:51:c1:aa:2c:fc:7d:a0:97:ae:79:ec:be:6f:
3a:6d:9b:1b:f6:e0:f4:44:ec:b9:11:7a:0d:f6:04:
44:e9:e4:e8:72:29:0a:09:ac:9a:63:7e:22:fc:4c:
5d:e8:2b:81:29:16:f6:57:2c:e9:1e:b6:94:60:f3:
a2:2e:d4:54:6f:fe:6a:20:79:4b:82:54:d8:51:01:
24:4f:3f:52:e2:8e:b3:68:0d:09:12:83:2f:dd:ae:
cb:fc:d1:1e:ca:51:f8:f9:98:3c:e8:a8:a7:ae:c9:
a6:9c:35:e4:3b:a0:5a:c5:f5:69:a8:a6:54:b8:13:
1d:0a:88:c0:2b:ab:55:ed:cd:28:50:c2:a7:d6:68:
23:ef:b4:9c:c4:42:2f:c8:f7:99:5c:7f:f1:0b:1d:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:74c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214460
Signature Algorithm: sha256WithRSAEncryption
62:04:bc:d5:ba:8e:cd:31:52:4b:33:8a:a1:9e:85:a7:c4:bf:
2d:03:a3:d1:b9:73:3b:56:85:35:e4:f4:ff:f3:c6:e9:ed:0e:
8e:f1:bd:e4:4f:c3:35:78:95:b4:f2:01:fa:42:9e:97:32:22:
ab:19:91:32:95:e4:96:d1:5f:86:2d:7f:b2:94:7a:f7:eb:40:
87:47:69:1a:a2:97:bd:7d:4e:cf:3e:fa:a9:6f:1c:a4:43:02:
8b:d4:be:53:77:b0:15:29:ae:12:fa:e5:a8:d5:64:1b:8b:1a:
8f:89:87:4f:d7:b0:35:d5:17:04:69:6e:45:65:74:f7:fd:ca:
e4:08:76:cf:f3:31:b0:3d:44:9b:2b:79:d9:ab:e1:6d:96:eb:
e5:39:c6:3e:08:be:b0:f2:b4:e9:14:7f:55:96:e4:05:18:6c:
e6:ae:df:18:56:04:fb:c7:16:b3:75:70:64:cd:ce:ac:3a:54:
a4:31:97:07:f8:33:6e:cb:47:62:a9:ff:e9:9c:65:42:83:bc:
eb:09:82:ec:92:ff:d1:6f:02:51:54:76:08:a9:a1:27:c6:0b:
72:d8:f6:4b:c9:8c:23:95:4e:30:ac:75:4b:37:90:55:95:c1:
87:d2:fd:b4:52:85:26:c6:92:d9:71:1e:45:a2:89:dc:19:46:
65:f8:09:62
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQjaSyELCzJn8SIlUpWizZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjY1NTRjNGQ4NWJmZDg2ZjBhNzQ5YzFjYTBmNWQwZTk2OTJlNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn63tje+eVR4CBgzMKQYYbNazL7T
Wrq7Frqu5xN2Hfo6YFkWVs0i/AogY83ekNRae402fNfF8LHUn/RJtChzo7tYxlMm
X3ISZpC1ifSmDlR7Fet1uir2hEYkeLGscAB1gFEpmi3fr4EWaVHBqiz8faCXrnns
vm86bZsb9uD0ROy5EXoN9gRE6eTocikKCayaY34i/Exd6CuBKRb2VyzpHraUYPOi
LtRUb/5qIHlLglTYUQEkTz9S4o6zaA0JEoMv3a7L/NEeylH4+Zg86KinrsmmnDXk
O6BaxfVpqKZUuBMdCojAK6tV7c0oUMKn1mgj77ScxEIvyPeZXH/xCx2CbQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFG9lVMTYW/2G8KdJwcoPXQ6WkuZVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzViY2E2
MC0xNjNmLTQwZjgtODc3ZC04NzNkYmQxMmM2YTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNWJjYTYw
LTE2M2YtNDBmOC04NzdkLTg3M2RiZDEyYzZhMi8xL2IyVlV4TmhiX1lid3AwbkJ5
ZzlkRHBhUzVsVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhR0wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDRbwwDQYJKoZIhvcNAQELBQADggEBAGIEvNW6js0xUksziqGehafEvy0Do9G5
cztWhTXk9P/zxuntDo7xveRPwzV4lbTyAfpCnpcyIqsZkTKV5JbRX4Ytf7KUevfr
QIdHaRqil719Ts8++qlvHKRDAovUvlN3sBUprhL65ajVZBuLGo+Jh0/XsDXVFwRp
bkVldPf9yuQIds/zMbA9RJsredmr4W2W6+U5xj4IvrDytOkUf1WW5AUYbOau3xhW
BPvHFrN1cGTNzqw6VKQxlwf4M27LR2Kp/+mcZUKDvOsJguyS/9FvAlFUdgipoSfG
C3LY9kvJjCOVTjCsdUs3kFWVwYfS/bRShSbGktlxHkWiidwZRmX4CWI=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:55 2025 by rpki-client