Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/foz68AtoPEnYxse-WfhY6_BcjWQ.cer
File: foz68AtoPEnYxse-WfhY6_BcjWQ.cer (raw, json)
Hash identifier: mT9WkblMkFUjzWBFUPeljVrlVByBkQd6h8LEa2OanIE=
Subject key identifier: 7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F94451612F983A7A84D7903F1BF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61224
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:44:51:61:2f:98:3a:7a:84:d7:90:3f:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e8cfaf00b683c49d8c6c7be59f858ebf05c8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:49:fa:6d:49:cd:ec:69:4c:b7:d6:bb:64:
4b:3d:d2:00:ef:ec:9d:ac:6d:9a:75:ce:e0:3f:e5:
14:eb:fa:d7:01:36:57:b1:ec:37:99:08:8a:ed:9c:
76:be:13:dd:cc:07:77:16:d1:85:45:04:bc:59:08:
e1:f9:0c:31:cf:ab:23:6a:69:a1:63:38:31:4a:36:
25:ca:c2:9e:8d:b9:b1:49:fe:98:bb:3a:91:28:06:
b5:c3:65:01:c1:9b:a2:53:4d:b8:9d:02:6e:ae:b8:
01:a6:9a:79:51:9a:32:ca:cd:58:49:5e:1c:1f:52:
d5:a5:57:98:ac:a3:2e:b6:c3:52:e0:eb:49:9b:4a:
b0:4a:39:e0:d6:36:5b:24:1a:bd:4d:46:80:30:e1:
86:1e:c2:e4:87:84:90:b3:75:20:36:8b:be:21:17:
8b:74:45:f3:b8:48:80:0c:55:ce:66:a1:b9:66:06:
18:a4:3f:cd:74:5c:55:84:c2:25:e8:7f:6e:2b:77:
7b:87:26:e0:ca:1c:fb:f0:bf:e4:7e:d6:16:fa:cc:
fb:01:a0:18:f6:34:f4:b4:89:c1:b2:be:c0:90:4a:
4e:f1:10:29:34:7c:79:b3:8a:76:bb:50:c4:79:37:
90:20:5b:85:e1:88:0d:ac:c8:70:43:d6:c5:07:c4:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61224
Signature Algorithm: sha256WithRSAEncryption
73:8b:54:a3:60:d8:39:08:8f:73:9e:39:44:44:39:4e:5f:92:
84:f6:c4:16:cb:6d:96:09:5b:45:7a:3a:7f:78:a0:83:60:9e:
04:c2:c6:3c:4c:63:a2:86:00:51:45:82:f4:ac:8d:00:11:a5:
9b:a7:29:8d:dd:9e:1e:95:6a:ca:2b:cc:c7:ec:2e:4c:f2:1c:
90:8e:73:6e:40:75:2d:59:5a:76:5e:5f:dc:b2:ec:75:87:f9:
a0:14:43:d9:71:a2:81:69:4b:df:52:08:69:91:0c:81:2c:6b:
9b:6c:e4:82:4e:ae:f3:29:14:60:73:e3:9b:bd:d7:ab:e0:98:
20:69:77:f4:64:34:38:bd:2d:e0:d7:84:98:43:25:43:a0:60:
2e:a9:a7:08:d5:40:c9:c3:71:13:8e:8b:2e:df:7e:ec:5e:f7:
c0:3e:32:b0:46:18:be:6b:04:6f:b2:02:43:3a:92:d9:0d:1a:
3a:2e:37:5d:8a:22:fd:9b:c6:9e:5a:29:35:4a:0f:c8:14:d0:
7b:70:df:33:2e:55:01:de:59:ab:1e:fd:9e:7e:8c:7c:8d:f5:
60:75:d9:35:26:e4:ef:ac:05:38:28:22:91:ec:cd:07:e4:ee:
74:d4:6d:7c:45:f8:56:27:3e:ab:7d:3a:20:29:30:96:e3:25:
5f:46:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:56 2025 by rpki-client