Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer (raw, json)
Hash identifier: RnyOsBbtsGaoWpOJyN8cApzzJWBFz5/6RJTYV8leVro=
Subject key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6E279F1E40DE19077DACF4A3709E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214638
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e2:79:f1:e4:0d:e1:90:77:da:cf:4a:37:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:37:f0:db:0b:bf:eb:b5:71:c6:23:a0:40:
40:31:e6:d4:ee:7c:8b:4b:c3:c1:ef:c1:0a:6e:00:
ff:5a:53:14:3e:16:23:fd:d6:1f:3a:c6:72:f7:42:
de:36:14:ab:76:83:15:d9:d4:8e:67:c2:5b:b7:96:
56:ba:be:bf:54:f1:96:46:86:1b:f0:23:99:4a:00:
60:30:2b:7b:0a:25:ae:38:19:b9:4c:4a:aa:c3:20:
32:57:2d:79:f7:1a:a8:00:eb:8d:0d:ff:aa:16:ba:
66:46:a2:e6:8b:3c:b8:dc:03:b8:2a:bf:a5:c5:98:
6c:1b:79:65:35:e0:29:cd:f8:d6:8d:bf:78:09:77:
17:21:54:ce:cd:08:72:36:fd:94:93:2c:9e:fa:09:
88:f9:ba:53:38:8a:81:ff:00:35:1c:e2:f7:8b:56:
b9:e9:bb:78:c5:1e:67:02:4f:07:a6:1e:b2:d2:ef:
29:e8:a9:e7:2f:a0:ba:23:aa:67:44:8d:b7:3c:30:
f5:fb:c4:22:a5:be:07:f6:09:25:74:81:1f:5b:4c:
4e:5e:03:57:a7:7a:f9:af:11:d3:9e:6b:e9:1e:ae:
87:ac:b6:da:9c:8f:dd:af:e0:e9:07:4b:e0:2f:c4:
c3:e3:38:53:c1:09:44:0e:69:a8:66:28:08:88:9f:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214638
Signature Algorithm: sha256WithRSAEncryption
7f:f3:9e:22:3e:0b:60:86:8d:ac:36:f0:a3:3c:e7:a5:f7:e2:
6e:2f:2c:92:27:fb:34:8b:7a:a6:42:ae:3d:70:18:8a:c9:d1:
76:82:7c:79:70:27:09:55:ec:b4:97:f6:72:14:c8:94:12:bf:
a8:2b:12:bd:47:63:d9:25:c5:3e:f4:7f:58:85:fa:7e:2c:27:
e6:2f:40:60:6f:60:d6:cf:4d:15:38:53:e7:4a:13:b4:5e:96:
44:25:fc:1d:c0:49:b2:e9:13:a6:23:b6:f8:04:5d:44:b9:29:
82:b1:da:13:f0:ee:04:f4:62:a4:a6:16:67:3d:a2:a5:53:99:
a4:51:a9:c3:27:85:10:c7:56:3a:e2:02:cb:29:76:c1:3b:3b:
4d:68:84:40:54:26:ce:0b:b3:83:dc:c5:43:d6:41:57:10:9b:
74:48:17:19:b2:5f:34:1a:0c:16:08:72:b5:7d:9e:57:48:7a:
6e:50:6d:3e:f2:03:97:e0:4c:2d:bf:74:30:ba:8e:94:79:ba:
c3:de:80:35:15:67:5e:78:52:35:b8:c7:a8:86:ac:4e:42:43:
da:a3:4f:ed:2b:70:bc:2a:04:e4:fa:7b:ab:89:03:ce:f3:2a:
5f:cf:77:65:b8:b9:d3:27:27:e0:f0:3d:4b:bd:b9:4d:11:82:
94:05:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:40 2025 by rpki-client