Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.cer (raw, json)
Hash identifier: X3ix91mADrVquuNXc3d26lcmH/78tW0jWiTTNceSowQ=
Subject key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DC0B6BE9178F5A4BF6E28DFBD81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203703
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:0b:6b:e9:17:8f:5a:4b:f6:e2:8d:fb:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:22:ac:29:0a:b8:57:26:43:d8:40:57:9a:
74:8b:69:52:f9:f5:7a:6a:d2:2b:e0:5a:d2:0d:97:
d5:e3:5c:46:6d:3d:6a:97:85:40:fb:28:75:65:10:
4c:38:5c:15:c6:23:9e:f7:14:8a:da:4a:19:d7:0e:
0b:9e:fa:47:71:03:c9:31:4d:53:37:c8:29:f1:a5:
ee:97:f2:a9:ec:72:fa:1c:fe:c5:48:80:1a:af:98:
36:38:74:48:8c:2b:63:be:8f:05:25:1e:d7:88:87:
28:93:74:6d:3d:0c:f7:39:f4:59:f7:ff:a2:3b:a7:
b9:01:e1:df:f4:bd:17:94:de:70:73:8e:9d:3a:5c:
d1:d1:4a:29:6d:0a:5c:32:09:ce:3e:48:79:a2:ca:
5e:fe:7f:bf:60:05:d3:67:2c:15:9b:a6:9a:9d:ca:
0f:e5:de:3d:ef:7f:b9:d0:3f:df:08:6b:21:59:f0:
d4:6d:17:ef:d6:b9:d9:70:52:85:11:d3:e4:c3:20:
8a:4a:fa:59:d6:c8:30:29:4a:52:08:3c:17:aa:3d:
68:64:47:3a:e9:a1:87:2d:bf:82:cd:8b:26:af:8a:
e5:30:bc:a6:04:f4:92:16:d2:69:28:86:4f:99:31:
4d:ef:8b:79:b5:68:e1:95:8b:89:05:eb:aa:75:59:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203703
Signature Algorithm: sha256WithRSAEncryption
40:2a:0e:19:43:85:da:3c:c7:f9:33:ac:de:3a:4d:e9:dd:95:
de:f4:38:b4:f4:91:f1:42:8a:74:83:46:20:30:64:9f:a1:fd:
03:31:c6:92:71:e1:4b:df:54:ad:8f:5e:8c:3c:fa:e5:b8:e0:
f5:a7:f6:29:96:27:7d:33:6c:1d:7d:e6:0e:84:14:e4:34:05:
76:77:97:cb:99:1d:5b:81:38:66:41:6c:31:83:94:05:02:24:
1e:e1:b5:29:16:37:8d:96:b8:2d:b9:bf:61:a8:91:d5:3e:5a:
00:8e:61:58:0a:6e:18:65:2b:f7:16:cf:f6:90:24:42:ba:2f:
67:77:ab:6e:4b:1a:f8:76:42:e4:3b:5f:d4:67:52:be:07:6f:
ae:02:17:6a:13:61:90:07:6b:44:5f:d7:cd:3b:bf:0d:32:0c:
92:95:83:97:bb:10:a9:bd:a6:d0:a5:54:c5:eb:5c:45:5a:0b:
b7:1e:8d:a9:da:c0:9a:49:58:d0:68:82:46:77:16:86:96:eb:
d3:75:36:c9:ad:96:a6:e0:f7:c4:dd:5d:27:d8:70:24:ea:b7:
cb:1a:94:7b:b5:75:b3:8c:57:8f:c2:a8:9d:77:70:f1:fe:f3:
43:78:ae:90:45:75:4a:92:87:65:e2:6f:17:96:28:f8:24:9f:
44:6e:5d:87
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1dwLa+kXj1pL9uKN+9gcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc5Y2ViYTk1M2IwN2RhYTIyYWYzYzhhYWIyYjFjZDRlMjI0OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ4irCkKuFcmQ9hAV5p0i2lS+fV6
atIr4FrSDZfV41xGbT1ql4VA+yh1ZRBMOFwVxiOe9xSK2koZ1w4LnvpHcQPJMU1T
N8gp8aXul/Kp7HL6HP7FSIAar5g2OHRIjCtjvo8FJR7XiIcok3RtPQz3OfRZ9/+i
O6e5AeHf9L0XlN5wc46dOlzR0UopbQpcMgnOPkh5ospe/n+/YAXTZywVm6aancoP
5d4973+50D/fCGshWfDUbRfv1rnZcFKFEdPkwyCKSvpZ1sgwKUpSCDwXqj1oZEc6
6aGHLb+CzYsmr4rlMLymBPSSFtJpKIZPmTFN74t5tWjhlYuJBeuqdVnbtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG55zrqVOwfaoirzyKqysc1OIkjQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzJjYzlm
Ni0wNWYzLTQwZDktYjZhZS0wN2ZmYjY2YzU0ZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMmNjOWY2
LTA1ZjMtNDBkOS1iNmFlLTA3ZmZiNjZjNTRkZi8xL2Jubk91cFU3QjlxaUt2UElx
ckt4elU0aVNOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbtzANBgkqhkiG9w0BAQsFAAOCAQEAQCoOGUOF2jzH
+TOs3jpN6d2V3vQ4tPSR8UKKdINGIDBkn6H9AzHGknHhS99UrY9ejDz65bjg9af2
KZYnfTNsHX3mDoQU5DQFdneXy5kdW4E4ZkFsMYOUBQIkHuG1KRY3jZa4Lbm/YaiR
1T5aAI5hWApuGGUr9xbP9pAkQrovZ3erbksa+HZC5Dtf1GdSvgdvrgIXahNhkAdr
RF/XzTu/DTIMkpWDl7sQqb2m0KVUxetcRVoLtx6NqdrAmklY0GiCRncWhpbr03U2
ya2WpuD3xN1dJ9hwJOq3yxqUe7V1s4xXj8KonXdw8f7zQ3iukEV1SpKHZeJvF5Yo
+CSfRG5dhw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:07 2025 by rpki-client