Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
File: g27BEvKGCMthun5cs62BDusT8Wk.cer (raw, json)
Hash identifier: eZWlNjC8ZMbrBITr9DqrQJYkPU0q4i8ntaisUKby5C8=
Subject key identifier: 83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D70A908C1BEA6EFA796AB608004DB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214556
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0a:90:8c:1b:ea:6e:fa:79:6a:b6:08:00:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:5d:e2:61:d8:96:01:87:37:66:26:dc:7b:
88:6a:ae:9b:d1:51:29:39:e5:87:e9:b5:07:52:19:
db:78:36:77:2d:0d:e5:8c:30:66:eb:c2:e9:a0:ec:
29:1d:1f:21:5a:c2:a0:5f:c6:46:5b:3c:3a:0a:d2:
3d:aa:68:34:07:3e:3f:85:89:6f:d5:73:bc:d6:bd:
b5:58:b3:72:ee:71:68:80:14:a6:45:b5:02:c3:8e:
4a:be:90:ac:db:8f:4a:23:38:ac:ed:4c:18:72:ae:
58:bf:49:74:01:46:36:94:e3:72:6a:c1:4c:4d:61:
59:b7:64:13:dd:72:cb:80:c4:d6:7d:ce:33:a8:8e:
e7:59:17:82:c4:27:b1:7f:5d:ea:0e:c2:40:78:c6:
ab:8a:33:4a:97:e9:b4:3a:61:cf:49:cd:6e:cb:63:
f5:5c:da:49:96:15:11:b6:3b:11:3a:51:18:7c:c8:
e2:5c:b6:01:5c:0a:08:8b:28:80:c8:5d:7a:db:71:
81:83:0e:22:c7:ac:c3:29:11:8d:ce:7e:03:a2:4b:
f8:91:6c:f4:ca:77:ac:e4:df:b3:05:ba:57:52:de:
e7:45:d3:74:97:4b:ff:95:7e:73:ee:69:dc:7d:99:
4f:98:79:c9:f3:9b:a4:b4:72:45:e5:f0:8e:6a:b6:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214556
Signature Algorithm: sha256WithRSAEncryption
1e:6e:59:83:32:8e:17:17:da:14:ea:18:61:0b:8b:54:78:9d:
a3:0b:1d:28:6f:ff:8c:e9:9f:c4:a2:ec:cb:03:d6:d3:45:f2:
a1:0b:1a:fc:40:a8:05:37:89:f6:5b:df:54:2e:67:83:9f:a3:
23:cc:3d:73:4e:a4:0c:c8:8f:8b:34:c6:f6:37:86:06:41:17:
f2:5b:8e:58:55:4a:67:ba:26:4d:f9:e1:4e:f5:28:7d:f8:f3:
90:82:02:12:b2:14:aa:bb:dd:b1:18:88:fd:07:cb:56:6d:71:
9a:70:83:33:dd:d1:0c:42:9f:5f:00:a6:21:1d:f9:16:83:f3:
7c:e9:33:7a:e5:97:5d:00:70:aa:8a:a1:00:9d:28:7f:c3:22:
7f:7f:43:0f:d6:34:8c:36:78:b3:8f:50:fd:67:c5:5f:48:2d:
56:46:73:3d:f7:31:5c:8b:c9:73:99:dd:91:b1:66:41:80:32:
b9:10:e1:79:db:49:56:c1:74:cf:d0:b8:88:01:34:22:83:3a:
aa:c7:3d:f9:4d:89:2e:3d:9b:50:14:24:5c:45:da:ba:bb:0f:
b0:73:a8:4e:16:74:5e:7d:98:a6:b6:62:ed:69:27:fd:82:a5:
35:23:65:e0:3d:fa:83:d9:ae:ab:9b:c0:00:10:06:f9:ab:0e:
a6:6b:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:10 2025 by rpki-client