Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer (raw, json)
Hash identifier: Pa8/UZ2kb5ldaJszVSUiayOwZC7h5MmQhZMvI35Kd1U=
Subject key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97BCF896119E8E22F9C44F9DBD7B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16045
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7b:cf:89:61:19:e8:e2:2f:9c:44:f9:db:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:d7:88:b3:ca:f9:25:1b:7f:96:dd:ee:4b:
77:23:cc:83:58:95:d9:dc:10:ab:f3:4e:83:e7:43:
e9:ca:17:62:5f:30:ee:28:c0:e0:80:ce:56:7e:75:
b8:3a:38:d6:e8:86:a5:db:13:02:00:73:42:90:3a:
a8:28:48:46:a7:bb:43:2b:49:1f:48:56:ee:fb:9a:
88:f6:05:4d:85:b4:b5:40:13:af:40:84:79:58:b6:
39:55:a7:3e:66:a6:a2:db:b4:7d:60:38:ca:27:82:
df:16:69:60:97:b3:45:ad:c7:cd:b9:f3:fe:af:a8:
54:af:bf:68:1b:34:bd:82:1e:f5:0c:a6:dc:76:6d:
87:59:f1:8a:b1:c8:bb:fe:18:e2:33:06:66:50:ce:
0e:cb:94:da:a9:5a:83:19:f1:5f:bc:62:91:46:8b:
45:0c:d0:a7:11:21:81:1e:a3:05:7f:5b:f0:cc:3c:
c3:a3:a2:84:95:fb:37:14:98:88:09:2e:13:8a:eb:
32:3a:87:64:5f:37:d7:e1:cb:b3:53:f1:71:ea:e2:
5b:1a:21:a6:90:0b:ae:1b:7b:06:84:bc:ae:09:a7:
7d:a3:61:97:93:3b:5c:a4:41:52:a8:5e:fa:0c:6e:
9a:b8:ea:ba:cc:9b:c1:3d:49:49:8c:82:3b:13:88:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16045
Signature Algorithm: sha256WithRSAEncryption
a2:d3:84:42:d2:52:e5:54:eb:52:34:ef:6a:fa:b5:55:72:70:
2b:cf:16:bc:c5:d4:87:59:68:b8:be:35:6d:a6:d0:dc:25:75:
c0:bb:86:ef:64:b5:db:ca:a7:6b:38:f6:5c:b6:14:a2:ea:a5:
5b:af:58:66:43:95:0f:af:f7:05:ac:08:c3:0f:9a:68:96:4a:
80:c4:fa:89:d9:96:1b:9c:b1:e5:27:f4:fd:c7:62:83:31:16:
fd:12:07:19:3d:14:fe:07:c7:26:a8:1d:8e:c7:56:bd:8d:b8:
91:0c:6e:bf:4f:d6:2e:8a:d2:74:47:2b:3d:a4:3f:8b:a7:aa:
79:4b:e1:65:d8:c4:b7:0e:70:e1:0b:4b:53:ca:75:1e:c3:45:
55:b9:62:f0:5c:30:1f:86:fc:e0:df:9f:cc:da:b0:c6:5f:37:
ed:17:ff:a0:6d:ea:2e:1b:fc:8d:c3:c5:5e:c2:dc:16:f3:91:
59:e4:15:7d:4c:b8:54:d1:97:fd:c7:8f:06:2d:cc:71:97:e9:
31:7a:a3:14:88:92:62:e6:4e:53:e4:01:ef:5b:17:8a:ec:32:
2b:21:2e:34:60:14:fa:e5:cf:35:57:1e:b4:a0:b3:4f:d9:b5:
35:0f:41:df:25:f4:22:3b:b1:49:93:ec:07:83:3c:60:54:19:
3a:9b:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:38 2025 by rpki-client