Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.cer (raw, json)
Hash identifier: N5Cy/7+wTU/Dx6xzYT3sVI/8THjNgPbEPVdFy3T+DgE=
Subject key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5F77005E558CC5237BF58C76A398A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215232
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f7:70:05:e5:58:cc:52:37:bf:58:c7:6a:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:13:a2:69:ec:b7:d2:da:fd:7d:ba:cc:b1:
ab:84:f7:b3:cf:47:89:ea:f8:99:f6:b2:12:c8:ce:
4b:26:cc:71:c2:13:18:21:ff:50:f3:12:d3:f6:3d:
27:6f:99:3d:36:a6:45:9b:18:cc:54:24:f3:77:17:
64:b6:30:1f:ad:55:24:24:e8:84:30:9e:0d:0d:6f:
7e:e1:1b:55:7a:61:0d:de:26:c5:40:4c:bf:14:25:
04:01:a7:36:3d:13:c0:76:3b:1f:09:98:32:82:e6:
16:be:47:86:f7:a4:ae:5a:73:16:52:5d:df:5d:6b:
aa:a7:3d:e0:5e:fd:6c:ec:b4:63:67:a1:61:c2:0d:
85:d8:32:55:be:bd:f5:d1:c9:97:46:4a:c9:71:e0:
6a:16:95:27:34:dc:54:e1:84:da:a7:0f:39:01:39:
71:db:fc:92:ad:db:bb:40:fc:63:08:35:bc:8d:b1:
03:9d:76:09:7e:f0:ee:f7:ba:ae:ca:29:05:25:69:
6f:55:a2:c6:9d:49:6e:f7:3f:60:61:29:46:76:49:
fc:bb:3e:63:b7:91:8c:0a:9a:45:46:74:8d:79:df:
23:a2:81:5f:94:b6:df:36:1d:07:e2:9f:04:e9:ee:
a9:2b:62:45:75:e1:d8:1b:43:59:4a:59:16:5d:c5:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215232
Signature Algorithm: sha256WithRSAEncryption
48:17:b6:4f:91:4d:f4:f8:36:04:15:b5:0d:46:dc:bd:c4:f9:
43:55:a8:50:7f:fb:a7:ea:f9:07:f6:b0:d5:b3:a8:33:5b:10:
d1:6e:89:fa:e5:df:8f:b5:c5:1e:04:b2:07:f9:62:fe:0d:13:
04:9f:65:a5:d1:b1:6e:9d:83:ed:06:66:5a:65:5b:82:05:70:
ca:17:fe:ca:df:34:ca:0b:11:c1:70:d0:d2:44:bc:9b:1d:cb:
20:96:94:e2:ae:c2:63:44:82:99:47:ea:b8:bc:80:d0:28:4a:
23:0e:9b:87:99:f6:b2:5e:27:cc:32:94:1c:f0:65:a0:8f:ee:
98:34:a7:1e:6b:b4:53:74:f6:fa:37:eb:e5:d2:35:c6:25:af:
ec:fa:7c:49:64:8a:34:7c:a3:36:a0:ac:14:4e:79:3e:81:fa:
b9:40:5d:a5:00:20:02:11:93:c4:e5:33:2c:5a:5f:bd:3a:31:
8d:08:16:d3:12:8d:76:ef:51:39:e3:1a:7a:06:03:96:68:67:
f7:68:b5:10:00:fe:b7:a4:fe:f3:fc:b3:f7:50:37:8d:3b:9e:
24:af:83:42:85:3b:b8:7b:0b:f2:17:23:09:96:56:cc:89:f7:
88:66:e9:fa:52:72:00:64:3b:88:6f:59:d7:56:32:8e:91:2c:
d9:34:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:29 2025 by rpki-client