Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
File: h66JOPDgseq2FIgzbSPKORh9bqM.cer (raw, json)
Hash identifier: n0wgoX8vI+SOFw5mi7qsXQLjdGdKS0UUw8OsAq1Bwqo=
Subject key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5E772AC9994B74967A96E8E4BFB15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215256
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e7:72:ac:99:94:b7:49:67:a9:6e:8e:4b:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:7f:2e:2c:c0:b9:ff:b2:66:78:94:d5:79:
96:43:e1:53:24:5a:b8:fc:8b:d6:03:46:11:82:99:
ac:67:9d:64:c9:66:7d:30:cb:63:13:7a:a8:77:5b:
19:0b:73:e5:e6:78:1e:9d:d7:7e:28:56:64:da:8d:
9b:f0:37:e0:39:58:0b:d2:bf:17:ce:7c:ed:df:76:
f8:04:61:b1:3e:ef:8d:ff:47:17:f6:96:15:0f:01:
0c:12:06:f0:74:a5:b1:58:21:0d:04:b9:2f:f9:e4:
21:c9:b6:25:66:bb:12:da:a2:c3:2d:89:5d:44:c1:
25:17:85:41:ae:45:f3:d6:ad:8e:34:43:9d:ae:6f:
f7:d9:2e:84:2b:b6:b7:8e:a4:f9:97:1f:2a:ad:3f:
66:2a:e6:a4:0c:ff:c8:5c:33:8d:67:b1:7b:b8:ed:
a4:71:80:c4:6c:15:22:93:06:fc:76:46:9d:9c:0e:
19:79:63:63:7f:85:8c:3b:76:09:89:68:d5:a8:01:
63:5a:90:51:3e:11:fc:c9:76:1c:d4:51:ec:b0:1c:
bc:4b:7d:bd:3f:fe:96:82:80:97:63:3e:ce:ad:7f:
d9:dc:0c:5a:33:81:81:0d:ab:ec:12:3b:f1:ad:48:
a2:36:af:ae:05:3f:8d:8a:b9:d5:4a:a7:d2:f5:fb:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215256
Signature Algorithm: sha256WithRSAEncryption
2b:5c:b3:cf:10:7c:26:be:04:22:3e:03:ac:12:4a:03:9e:20:
3f:94:ef:85:80:14:13:14:a5:16:9a:2b:46:77:9f:26:40:3c:
15:78:40:33:32:4f:df:9b:a0:e4:8a:fb:38:69:c2:61:ae:de:
ac:57:5a:e6:42:e7:b7:8f:83:9b:f6:4f:81:98:d6:0f:c3:01:
da:b6:f3:d9:f1:43:5f:ad:d2:dd:64:05:6d:23:2c:3e:ce:02:
7b:f1:58:c8:ec:6d:d3:1b:eb:7a:97:cd:dd:3d:58:71:92:8d:
7e:96:de:7d:64:03:2e:df:2e:49:5b:b4:72:7d:74:b2:f9:e4:
4c:e7:a5:d7:fb:36:7b:66:31:c1:98:82:26:94:6b:74:be:96:
53:7b:d6:5e:7a:c8:e2:73:ab:91:09:04:98:30:d2:6b:36:6d:
71:71:0f:70:0c:97:b2:af:ee:06:f9:72:db:5b:08:c7:d5:50:
a7:69:8d:47:f4:3d:d4:bd:c9:d0:09:3c:3c:6d:dc:33:59:10:
a0:b5:f6:a2:da:8a:4a:15:b2:b3:47:31:b0:fa:48:9b:4f:51:
7f:60:c7:4a:c7:87:eb:08:4e:e0:40:20:a5:bd:97:17:95:d3:
52:78:61:75:87:1a:7d:65:f8:ff:f4:d8:c6:12:0e:cb:8a:2f:
16:2c:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:15 2025 by rpki-client