Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
File: blHLmkgbWumdi-EYPj-wh_9ci28.cer (raw, json)
Hash identifier: B3c7uE1rR8jN0PzIdgkbn/LTmVp3hQj6Za5d1Z9SlFQ=
Subject key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194205BD7AB01510A550E168659DAE99E6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:34:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214323
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:5b:d7:ab:01:51:0a:55:0e:16:86:59:da:e9:9e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:34:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:2b:a1:b6:64:94:81:ec:b4:03:36:65:1d:
fd:17:4a:9c:fe:c9:7f:2e:ce:d4:24:81:25:47:6d:
81:c2:52:62:4a:6d:bb:52:26:0d:e9:e7:7d:8f:4c:
09:8c:a0:8b:10:41:3d:a1:0c:c7:44:6c:60:a8:ba:
54:7a:09:31:ce:4a:19:d0:73:c4:9f:4e:7b:3a:4b:
a9:bd:a5:32:d5:4a:62:e9:b0:51:7d:3b:a1:ed:64:
92:9a:d0:c7:fa:34:43:c8:6d:24:a4:fa:08:eb:2a:
46:3c:8b:95:32:d7:a7:d9:62:47:13:95:67:f5:94:
72:bb:b8:56:53:50:e1:c9:33:76:ae:29:f2:bc:5f:
af:b6:4e:96:2a:5b:c2:03:9b:a1:40:f4:6d:70:bc:
a0:93:7c:32:59:4b:20:f3:65:fd:cd:42:59:eb:de:
19:bd:69:02:89:d3:fe:8c:0f:bb:b0:43:bb:b8:a3:
d3:88:43:a6:a1:b3:29:3c:e1:08:b6:76:8b:19:d5:
12:fd:3a:19:16:7b:7b:34:09:2e:5a:ad:fd:f7:3b:
23:07:3c:21:96:3e:20:23:9c:1a:23:85:65:69:97:
33:3c:71:a9:09:04:04:36:0a:fc:61:e3:c1:da:76:
8a:bb:ef:fd:cc:44:73:32:36:a5:99:f5:36:b6:3e:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214323
Signature Algorithm: sha256WithRSAEncryption
72:2b:e4:fb:13:7f:af:06:b8:d8:03:e3:ec:20:3a:0e:2c:0e:
1d:56:fc:ee:be:70:9a:f1:6b:55:32:45:44:19:86:bb:b4:8d:
b2:a3:3a:f7:03:8a:c7:b9:29:ae:a5:8b:db:6a:cd:31:8e:99:
02:64:4f:f2:be:99:21:67:1b:9c:04:05:df:e6:43:57:11:cf:
a5:4a:47:a3:02:41:22:9e:7a:0e:98:eb:fd:41:9a:22:dd:7c:
a5:ac:95:eb:9a:7e:08:24:84:4c:48:12:d9:aa:52:cd:52:82:
36:e4:93:95:ab:52:83:53:d0:8d:74:ba:b9:c7:3f:64:80:eb:
22:a6:b2:b5:91:d1:ab:5b:74:81:b0:31:09:74:9a:1b:91:c5:
fc:72:a6:d9:38:5a:97:13:3a:2b:25:c6:dc:6d:09:9b:aa:11:
d4:f6:e7:9e:25:0a:25:89:29:9d:7b:fe:df:10:e6:3e:ca:0b:
eb:e0:0a:1d:1b:91:1a:0a:f0:61:ca:24:0b:8a:48:e3:d3:a9:
2c:60:f2:d2:73:bb:18:3f:86:c5:59:dc:7d:11:ad:f0:e3:f0:
4c:2b:e8:4c:aa:47:dc:39:ca:33:8e:ba:2b:f6:de:79:27:cb:
b4:87:06:4c:ef:89:c2:0c:a1:c2:d6:25:0e:ef:33:06:f7:b5:
07:db:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:05 2025 by rpki-client