Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
File: f35evW-kacXjcL_BBsTUqtHh25Q.cer (raw, json)
Hash identifier: p3g4K109V5ngd3vekPLeXbMleqqC6b7WXS7qC/m9ZTE=
Subject key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747F9BD249B164AC53BA5EF53D1EBDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f9:bd:24:9b:16:4a:c5:3b:a5:ef:53:d1:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:ad:15:df:bc:d1:12:35:13:6b:29:40:4b:
f6:36:09:e4:ed:ea:43:51:84:ce:c2:07:9e:d0:18:
77:35:59:0b:40:b5:b3:2a:cd:04:c3:c7:d6:37:8d:
13:b8:7b:7f:29:07:19:ec:7e:65:9e:03:15:c2:7f:
e7:84:dc:27:17:7f:ac:cd:eb:cb:04:d0:c4:4d:fa:
9a:72:93:e2:7e:59:c2:7a:dc:18:d7:7a:f2:89:43:
48:00:cb:41:5e:14:e8:83:79:1d:97:8f:7b:c9:c7:
65:cb:72:14:f8:f8:91:2b:65:b7:1e:e6:88:9f:a0:
4a:f6:67:e1:95:e1:df:5e:85:9b:82:75:07:2d:3c:
ce:6e:a2:cd:84:cb:97:59:dd:04:53:8d:4f:a7:66:
9a:55:ac:1e:d0:e4:fd:6c:0a:36:9e:9d:fb:69:ff:
9b:e2:bf:67:8a:e2:15:46:d3:35:fb:50:2d:23:b9:
96:06:67:45:8b:8e:ca:b8:81:83:ab:8a:cf:79:cc:
b2:df:57:da:ab:4a:04:81:8b:7e:0c:6a:36:e7:56:
58:d0:e7:2f:81:cf:9a:00:c8:f8:fc:be:de:eb:18:
4b:ea:80:23:61:2b:ef:0d:b9:5f:38:bc:63:0d:bd:
94:ea:62:f2:be:7c:31:93:a6:e5:0d:25:33:6a:88:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206843
Signature Algorithm: sha256WithRSAEncryption
40:16:1c:86:12:9d:8a:a2:cc:42:af:a9:2c:6d:20:c0:6c:8b:
75:1a:73:30:a6:6a:7b:89:8c:fb:c3:91:76:df:8a:77:bb:8c:
10:1c:07:67:43:71:d7:bd:68:c4:93:82:b5:a1:8a:58:df:c7:
4e:35:cc:5c:0b:e7:ba:52:0a:78:7b:d1:c8:a6:63:b3:85:89:
25:79:99:5d:49:f0:2e:e1:f0:ed:a5:a8:34:36:c3:e1:87:b0:
64:08:70:1d:f7:08:a9:c6:33:de:b7:80:a4:9e:85:5f:97:8a:
66:7b:ed:e2:4a:be:08:9e:cb:3f:cb:ab:34:c0:71:21:94:d5:
66:0d:71:29:99:90:b9:0a:ae:af:51:6c:7f:c4:0f:c8:6f:cf:
86:1c:f4:48:e7:e4:43:45:6d:d3:4f:36:2e:e2:df:60:a2:e9:
96:3a:a8:42:18:11:2c:43:2d:8d:85:6b:83:eb:2f:6b:a8:63:
28:07:05:bc:2c:26:d7:0a:6f:e6:e6:d7:90:34:5a:fb:e0:e4:
19:50:7e:4c:2b:12:80:9d:a5:a2:29:96:d7:76:03:ec:4e:13:
c3:d1:3c:4f:9c:37:9d:bf:4c:33:31:a9:c5:5c:4c:54:cf:fd:
e1:f2:3e:28:8f:a8:74:15:a6:22:5f:41:36:65:c9:ca:b6:5f:
2f:e3:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:11 2025 by rpki-client