Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
File: fgdwhBDMdkNEuM-k8-NopeJStlA.cer (raw, json)
Hash identifier: Y9FFN19CWxaAb2LaOwzeY11SJafNAYnTIDXseO8TOaA=
Subject key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C6F838FBCD3F0C24C79CB8741B9CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199075
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:83:8f:bc:d3:f0:c2:4c:79:cb:87:41:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:aa:76:84:33:ea:f9:8b:2b:75:a2:43:a2:e9:
d6:0c:20:64:fa:94:31:4c:01:ae:ca:0a:8e:cb:49:
94:e4:8d:75:9f:60:61:d9:fa:a5:64:2d:72:b5:58:
0b:61:d1:ac:ca:51:70:a7:8e:66:16:c5:bc:16:cc:
7f:66:0b:88:2f:34:73:fe:b2:b4:a0:85:c9:47:59:
aa:28:34:2c:76:40:4d:58:95:e1:0c:9e:dc:9b:39:
5e:e2:f9:04:2b:c9:03:19:90:4c:8b:f5:2a:93:f7:
d5:a6:43:9a:fa:56:81:61:29:c8:47:54:ad:d5:c6:
97:01:ed:44:82:e0:c0:82:d3:7e:56:1b:5d:6b:77:
11:a9:1d:f8:91:34:11:ac:af:48:bf:12:50:7f:ff:
dd:16:29:ca:eb:25:3e:35:ec:69:44:1a:d8:78:9d:
ce:4e:0d:11:d1:24:14:47:0a:96:f9:8c:c1:cf:f3:
d1:60:77:12:bf:90:3a:af:97:af:13:da:04:ff:90:
06:17:0e:ee:17:3b:e0:ae:3f:a1:76:49:4d:9e:14:
9b:45:b2:7d:98:fc:ff:1f:5b:da:aa:f8:93:34:bd:
5b:9a:cc:c5:30:5c:5f:35:6c:3d:d3:1b:0d:77:4b:
34:3a:ca:8d:28:d9:5e:59:22:9b:6b:dc:48:c7:62:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199075
Signature Algorithm: sha256WithRSAEncryption
6b:51:81:70:10:6f:ea:c1:78:96:5f:3c:62:61:e2:d0:84:f0:
83:b1:ba:b0:ce:ad:a3:82:9a:8a:3e:65:f4:76:a2:92:36:bc:
8a:4c:60:6e:d3:68:ac:34:a2:4d:a6:71:62:93:9a:9a:0f:5c:
a1:d6:64:ce:2e:34:f9:b2:54:af:09:07:6f:5e:30:1e:2f:21:
89:fc:b0:e1:49:72:6a:76:8c:ad:6c:28:7f:18:66:ab:78:7b:
da:12:c4:fd:ba:ee:a3:e1:41:06:88:e4:4e:d8:6e:ec:86:e6:
1e:6a:40:e5:e9:5a:e0:79:99:33:8e:7c:f9:fa:8e:dd:30:a0:
be:c6:66:0f:12:55:99:82:3e:90:a9:c2:45:7a:63:63:14:4f:
26:f0:11:18:17:6e:de:3b:39:21:35:b2:f3:80:e9:ab:0a:6e:
ff:d8:75:d0:e2:cb:ff:78:5f:c1:ae:41:39:9a:4a:14:0e:c8:
f7:43:ef:b8:fc:98:00:10:8a:58:51:0c:7c:60:6a:54:21:e9:
ff:cd:4f:d9:84:34:94:56:7f:0e:d4:98:43:80:e3:30:7a:13:
cb:74:38:5c:1c:2d:98:e3:81:49:7e:a2:70:9d:a6:d8:ec:16:
6c:b9:9c:15:b3:06:ff:c6:6f:a8:25:98:15:c7:aa:cb:b2:f5:
d1:87:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:16 2025 by rpki-client