Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
File: ggA1PrKBit3XElx4FCFDMUneb2I.cer (raw, json)
Hash identifier: 8iDiKrCA5JS0rPo3MDe/JvXwEUN/eaSb9gRO7fSB6O0=
Subject key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B6DBFE6D7E03D4400FBB2201FEB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215491
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b6:db:fe:6d:7e:03:d4:40:0f:bb:22:01:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8200353eb2818addd7125c781421433149de6f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:d2:06:ec:f9:e6:d8:f7:7f:71:8d:32:c7:
62:25:40:42:72:27:89:34:51:a7:fe:d6:49:d4:8f:
60:87:96:4a:f8:43:65:85:86:56:8e:10:de:17:b6:
f9:51:f4:99:34:0c:5e:3b:64:e8:26:7e:a0:c7:f6:
53:0b:39:e4:d8:e2:9f:85:c3:e9:f2:e8:f6:c9:d1:
89:d2:ac:c2:0b:dc:72:f6:34:7a:69:2a:83:56:8a:
9b:85:8a:e1:ff:f3:b6:03:59:32:d9:2c:66:26:75:
63:e4:c3:83:4d:d8:20:32:66:09:c8:ec:6b:84:22:
1b:e6:e4:4c:4f:6f:54:9c:f7:b7:e3:ed:9f:00:5b:
6e:07:92:03:47:e2:d4:6c:63:2e:8f:5d:60:36:d2:
e6:1a:18:8b:8f:0f:be:a3:69:4c:e0:4e:a3:ae:21:
2f:5e:1b:5b:ba:0a:88:e9:02:df:f2:a1:39:11:1a:
f0:2d:9d:b9:c4:e7:a0:e0:7a:2c:18:c7:95:bb:0f:
a8:13:30:4f:65:c1:3b:d0:61:c4:e4:df:0d:0f:2d:
d5:2a:d8:f4:67:cf:e6:e3:e0:51:81:a4:cd:ff:0f:
44:22:9f:9d:83:a6:ed:aa:72:6a:b2:dc:3f:03:f1:
e8:80:96:a1:94:c8:14:f8:95:21:a3:de:22:e0:40:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215491
Signature Algorithm: sha256WithRSAEncryption
3e:ea:8a:db:67:a9:41:52:3d:25:d8:2b:11:35:9e:d3:79:cc:
cc:33:0e:9e:f4:c5:69:c1:9b:96:5c:32:e2:1c:ad:a2:dc:a7:
f7:9e:75:b3:26:86:d2:17:0c:22:7b:d3:6c:af:d9:b0:3c:d6:
53:95:f0:e2:4e:67:fb:10:3b:7e:68:5d:d7:56:5c:d6:39:06:
d7:e8:96:0e:29:ef:5d:03:38:92:f0:93:77:b7:14:be:f3:52:
fb:ca:6c:7c:04:11:35:c4:f5:3e:82:26:0f:ab:df:2f:bb:1c:
09:97:7d:50:7b:c1:98:5d:de:84:5a:6b:76:13:e7:e2:63:d4:
3b:d2:dc:1d:23:1d:f4:85:74:60:8e:52:6c:77:1f:7d:42:0c:
78:2b:c9:79:68:98:b2:8d:7e:0a:9b:62:10:1c:18:42:9c:32:
30:b7:33:93:9c:a7:f0:2d:82:8f:01:34:2a:0c:e7:a3:e4:a1:
c1:43:ab:85:a0:77:5b:7a:ce:e3:62:15:95:d9:1d:89:6b:b3:
b5:bd:5e:1c:99:fb:6e:33:a2:3d:26:f4:c6:d6:c7:d4:d1:24:
79:17:35:b0:f9:b6:f7:74:ee:c6:d2:89:03:61:1d:3e:c7:fb:
b8:09:40:8d:b0:43:17:35:75:5b:d3:7c:67:a5:90:c7:3d:56:
e9:9c:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:09 2025 by rpki-client