Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
File: fySblURiBoP5SziKdVGmimST7RI.cer (raw, json)
Hash identifier: xbBOlq3aYNNSTfMBqorE+EmSe2Q1onpz2869pizzJR8=
Subject key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222032443E05949F84F47BA4C11318D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213665
IP: 2a14:ee00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:44:3e:05:94:9f:84:f4:7b:a4:c1:13:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f249b9544620683f94b388a7551a68a6493ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:72:50:69:9f:80:9b:c0:00:70:cf:39:76:
b4:bb:b0:68:3c:6c:a7:24:3a:c8:ae:74:87:ad:8b:
62:25:7d:44:40:2c:5b:67:e4:c6:aa:d2:e2:35:e1:
7e:ef:9e:31:29:b1:87:b3:b0:a4:f7:b3:6f:22:03:
f5:9b:59:eb:5b:77:d0:cf:47:ab:70:bf:a9:65:12:
f5:0a:6b:92:68:d9:7f:03:f0:9b:1d:d7:81:f1:71:
fa:be:76:4d:e0:ab:4b:73:14:05:a9:ae:90:93:60:
87:ce:bd:54:f5:be:1d:e3:b2:91:f5:ef:7c:91:d8:
82:bd:e0:a3:6f:b3:cd:0c:6f:b4:97:9e:23:af:5d:
0a:0a:ca:40:0b:93:ce:b9:a3:03:8a:a4:69:11:56:
b2:b2:2d:31:ce:8b:20:33:48:a1:c2:8e:cb:06:6a:
18:60:de:76:a9:10:7b:c4:ac:fc:af:e6:13:d4:47:
5d:ef:6b:55:7e:79:07:25:da:8b:0a:35:09:27:5a:
0e:a2:02:19:ba:b6:30:d1:d1:9c:cb:85:62:b6:11:
96:d7:3c:7f:d7:1c:da:02:60:d7:f7:00:c2:14:77:
70:0e:07:c4:06:99:79:99:f7:1e:b7:dc:d6:32:49:
e4:a4:47:24:bf:7c:cd:e8:a3:e1:a2:fb:be:21:b0:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ee00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213665
Signature Algorithm: sha256WithRSAEncryption
27:ec:40:6d:46:67:85:c8:40:91:9c:bb:2d:5a:b3:8c:e0:55:
13:15:41:11:29:8a:2c:6c:97:f6:38:d6:cd:af:89:79:30:48:
d0:b3:50:52:11:ba:8b:a0:aa:e4:9b:be:62:ad:bc:00:49:13:
42:ec:ae:5a:5f:64:59:29:8f:70:84:63:0f:db:ec:9b:a2:91:
12:4f:c5:92:48:2e:f0:9c:44:f2:e0:7e:20:b7:a2:53:95:d3:
59:8c:8d:f2:b7:49:17:64:42:77:c8:9a:93:e6:66:5c:c1:b5:
d3:12:4f:1f:77:55:57:18:c5:2f:62:bb:15:a2:3f:9d:9d:fa:
09:7b:1e:4e:df:57:b0:95:87:b0:d3:92:09:75:ef:c2:9c:82:
ea:62:92:8f:fd:7f:39:d4:11:58:d9:13:6f:9d:f8:de:6a:20:
2d:db:49:6b:fd:e9:8a:8f:1f:35:d6:d0:32:99:53:09:08:c4:
8e:d9:e6:6d:37:8e:ec:3c:18:12:fd:50:60:8e:f1:2f:33:0c:
16:99:f9:b7:e8:de:64:0d:6b:af:75:f4:03:8d:b6:2b:aa:01:
ba:86:73:b6:44:04:c2:dc:62:8c:24:8d:3a:d7:06:38:60:43:
c8:4f:51:5b:28:26:cf:57:45:23:96:1e:28:5f:ba:79:9d:cf:
84:a4:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:51 2025 by rpki-client