Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer (raw, json)
Hash identifier: O2S6+Sl819wQMD80eTpMLo3cgsSIDP1/pAInhW1xCX0=
Subject key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BC89EF136D7D24106556FD1A91B8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216418
IP: 2001:67c:2dc8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c8:9e:f1:36:d7:d2:41:06:55:6f:d1:a9:1b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a1:47:f0:c2:7a:e0:a7:8d:dc:bb:ec:ff:25:
07:8a:95:d4:84:f5:73:8e:73:ce:62:ba:e9:af:95:
a6:82:42:af:ce:2e:ee:c6:1e:d2:a5:b1:d4:73:25:
c7:e5:b6:7c:ff:d3:13:24:1b:c2:20:59:a4:ed:9a:
05:81:6c:18:02:54:3d:c3:80:d6:d3:f6:c4:3b:c5:
c6:15:72:3c:f8:65:6e:41:11:53:a8:c9:2d:3f:78:
ea:f1:d6:0f:57:9e:9c:70:42:2f:6d:26:c0:d7:77:
93:59:83:bb:67:54:e4:81:01:31:d8:9a:64:2a:3a:
bc:61:d9:46:1c:58:2a:25:7b:fc:3a:4f:d8:a8:15:
97:5a:cd:2a:43:ad:a9:54:ba:a5:2f:5f:06:e8:8f:
b2:d3:f5:c5:b4:27:0d:13:85:10:8f:0b:f6:8d:b7:
00:1f:31:5d:f2:fd:1f:52:03:0e:bb:56:9d:bd:be:
07:58:a2:a3:d4:16:cf:14:8a:bc:f2:a1:a6:37:da:
90:f2:71:86:d1:2a:da:07:dd:8b:42:ce:b5:3b:b0:
e5:ea:fe:44:04:f5:b4:30:b2:b4:71:22:8e:a1:ad:
74:6d:fa:c4:9f:36:5d:1c:30:ce:a0:fc:1b:a0:f7:
35:e4:01:b2:a9:cd:67:87:67:97:41:3e:e8:42:dd:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dc8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216418
Signature Algorithm: sha256WithRSAEncryption
49:f7:ed:4e:32:b6:bc:f1:9d:d0:2d:8b:1a:67:68:9d:e3:da:
3d:57:d0:cf:c9:7c:39:76:8e:fa:4b:60:33:5d:5a:db:a3:a9:
f4:8c:46:4f:f8:b1:b7:eb:9e:1d:ee:d6:54:15:7b:ff:08:cc:
16:66:33:ec:61:69:a0:19:fc:16:a5:81:db:44:28:eb:c1:eb:
e9:54:e6:a5:68:d9:fc:a4:b7:b4:41:39:fc:f3:bd:96:87:c0:
32:41:18:c5:62:e6:26:14:45:b7:b3:15:cc:26:cc:5c:48:6f:
82:96:dd:09:c7:2e:a6:c3:41:23:5c:08:5e:3e:1e:0e:09:94:
9f:59:38:b7:aa:ac:14:dc:ba:ba:a9:0d:85:62:19:5b:67:64:
b7:e8:95:05:ea:0f:13:fd:24:23:11:da:29:3a:dc:a7:89:b7:
aa:0d:59:91:a8:3d:e0:9f:1c:e6:26:ba:65:5a:43:bf:35:f7:
db:2c:de:4b:b9:e3:b1:8f:62:83:23:f8:13:93:70:c3:c6:4e:
56:f2:ac:d5:51:c8:93:ee:9d:45:16:4c:34:03:3a:51:df:08:
74:58:d4:05:f1:53:25:a3:20:e9:c3:ec:1d:22:46:ec:e7:48:
2e:37:62:82:fa:f5:90:5c:a7:45:34:e0:45:7b:e9:c8:17:a1:
d0:0b:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:35 2025 by rpki-client