Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.cer (raw, json)
Hash identifier: d0MSriGg+KD/avjEP24lzRByEq6boUxxHG4QzHVsR8A=
Subject key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A4310B9FC18456195AEB6C46BFCE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198202
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:43:10:b9:fc:18:45:61:95:ae:b6:c4:6b:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:db:0f:9c:ba:f3:62:87:42:5c:27:b7:38:
d6:51:a0:c5:10:3f:5c:65:7d:76:e9:70:01:ce:61:
99:72:85:6a:ae:23:6a:97:ab:30:da:d1:ba:d7:61:
37:c3:ad:98:94:3b:64:38:ba:2e:1d:39:83:5d:7f:
9b:4a:02:51:22:a6:2d:16:ad:73:ec:75:43:0a:db:
14:ff:0a:b2:d4:e5:c2:d0:6e:33:89:e6:48:56:50:
52:dc:cf:ff:94:53:80:42:c3:ff:5b:02:43:14:e0:
5e:c0:07:21:c1:25:9a:cd:b1:86:49:a2:51:e4:d9:
f3:be:22:3c:aa:b3:f9:51:4c:0a:9a:d1:2e:ff:82:
58:9b:27:67:40:d1:b7:24:52:d1:e2:b5:2c:1e:11:
92:ae:d8:db:12:9b:73:c0:a5:fc:d5:56:1d:27:82:
c3:61:4b:d5:da:d9:4e:da:22:cd:db:06:97:b1:37:
11:48:a8:65:c1:2e:b3:e1:66:43:75:ff:1c:2a:3a:
59:9f:b7:90:18:83:7f:95:04:45:fc:4f:e9:24:ef:
3d:2a:01:27:d2:17:bc:05:5a:d9:95:77:e6:65:bc:
23:01:e4:d6:9a:8b:cf:49:8b:c2:36:e2:a6:68:09:
d5:ca:0e:28:8d:42:a8:2c:26:4d:4e:bd:1a:7d:29:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198202
Signature Algorithm: sha256WithRSAEncryption
22:bd:ba:a9:e5:61:ab:c6:ad:56:97:be:4e:29:ee:40:00:2b:
dd:70:7e:10:1b:1b:47:eb:53:ee:66:16:a8:c8:48:db:c7:8d:
a1:69:c7:56:ab:0b:db:fd:03:9f:d5:89:dd:00:5b:69:c8:89:
ef:8a:42:cf:cf:17:e0:1f:e0:1a:22:db:e5:4c:7d:59:42:73:
d1:61:a3:ee:3e:fa:96:d9:c2:21:2f:7b:1c:a9:fe:89:7d:b2:
d0:43:72:75:62:76:39:25:b5:5b:70:9d:c1:15:3c:74:38:ca:
eb:54:53:9d:21:3b:34:f5:62:92:38:22:44:1c:65:45:a2:79:
09:fc:63:da:b3:ca:d6:24:34:3b:5b:e2:4c:9f:b9:b3:95:8a:
66:98:9a:b3:d3:cc:5c:4e:f2:54:83:aa:bb:53:c2:25:49:c2:
6f:50:88:48:56:8a:eb:4a:77:64:d4:94:b9:30:a4:83:a9:8c:
90:bd:22:5b:3b:04:d5:42:7c:0c:c5:c2:c5:18:ff:a4:bf:da:
3c:80:cb:b8:f2:0b:08:a7:e6:7b:79:dd:9c:0e:dd:ba:32:01:
0f:af:d7:4a:12:0b:c0:b8:5f:29:94:af:46:3c:0d:32:7b:c0:
52:74:df:c0:c1:74:bc:25:1d:8b:c3:94:c8:59:2c:ab:48:9d:
1b:41:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:02 2025 by rpki-client