Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bP-QsXePU3Q_kng8rxdIouzWaKA.cer
File: bP-QsXePU3Q_kng8rxdIouzWaKA.cer (raw, json)
Hash identifier: uuC3aWX7whiU7XXqzgTcf5dG68qiAJKjMKMGLxsIqUM=
Subject key identifier: 6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143EFEF6D90A27756A51DE69EFAA997
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214170
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ef:ef:6d:90:a2:77:56:a5:1d:e6:9e:fa:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cff90b1778f53743f92783caf1748a2ecd668a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:13:b2:6b:4a:90:01:e0:2f:f0:14:f7:37:
2d:73:e9:2f:44:1a:99:05:5a:8a:0e:e8:24:dd:bf:
12:7c:b1:4d:7e:fb:9c:4f:c7:87:ba:9d:e7:13:ca:
63:4e:c6:3c:eb:8a:2d:e9:fb:32:a5:65:51:6f:36:
5d:cd:65:cf:10:37:e7:68:6b:5d:06:47:19:d7:5d:
70:0b:21:e5:74:2c:bd:95:0e:ba:6a:55:73:fa:4a:
ba:1a:88:00:bd:40:a1:c9:2b:ea:78:a6:d4:81:85:
f5:97:fc:92:d2:c1:73:4e:ee:a6:b8:d5:61:ab:87:
fe:be:82:b2:69:8d:08:ad:30:6f:17:6f:94:61:c0:
a2:12:d0:17:94:5b:5b:e5:94:9d:8b:09:df:43:89:
f6:ed:a6:78:55:a1:47:18:77:e5:cc:33:54:c0:71:
24:85:8a:05:9f:6e:70:af:b5:a3:c7:4f:b6:1b:69:
42:ef:84:06:50:f9:c9:56:82:57:25:d9:7f:81:4f:
e0:9f:46:4b:df:cc:45:1c:14:9f:0c:4e:ea:28:b8:
e4:63:f5:c4:4b:83:2d:0a:29:ad:8f:73:37:dc:41:
28:de:5c:12:5e:41:3b:db:6d:d7:42:32:e5:5a:43:
45:91:14:b4:bb:fc:bb:29:33:73:d2:6f:c0:97:41:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214170
Signature Algorithm: sha256WithRSAEncryption
73:3c:20:5d:d9:ec:e1:ff:8f:58:de:22:4d:94:93:bb:b6:2d:
81:79:01:36:b7:eb:c4:90:98:2e:38:0b:9e:cd:13:bd:e4:a4:
48:e5:8d:cb:f4:7d:99:53:a0:c6:2a:14:f1:47:fe:bc:42:ca:
c1:e7:1e:ca:98:a8:0b:bc:2b:35:b1:c3:5f:95:66:6d:34:c1:
f8:50:8f:ec:4b:e0:40:6e:11:e5:4a:44:3e:87:20:bc:05:83:
25:45:40:8e:b7:59:aa:83:fd:48:70:21:19:d9:ef:f7:33:6e:
02:a1:45:27:7b:29:28:ed:23:36:48:68:47:03:3c:16:69:67:
cd:68:8a:0a:56:f7:33:25:5c:4b:af:c1:f4:70:4b:75:c9:59:
7b:70:29:2f:84:ab:3d:a6:23:81:f2:9e:f7:f5:0d:aa:3e:f4:
7b:2d:dd:6a:76:6e:4d:43:73:39:c1:b8:19:a8:cb:f0:52:de:
f6:a6:aa:1a:89:2c:2b:f0:e2:d6:97:9a:76:10:34:8c:5b:bf:
df:63:40:ac:a9:1b:af:eb:7f:a6:a6:56:a5:91:49:6e:bc:68:
93:f2:e5:36:e6:76:3a:90:a1:bd:e3:89:33:a4:09:9d:55:43:
b8:22:22:ed:ca:ed:6d:3b:26:1f:9b:9f:47:a2:3a:3d:79:35:
ee:ac:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:41 2025 by rpki-client