Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.cer (raw, json)
Hash identifier: KP1EgysRfO1lEpveSHzGeHDo4mQac0eP5TJRXxlzCDo=
Subject key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5832DCF73777DD7D08322D0DCF903
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214587
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:83:2d:cf:73:77:7d:d7:d0:83:22:d0:dc:f9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:4d:a5:4c:f8:a3:7a:e0:2b:b2:b7:92:70:
75:c7:af:38:90:e8:11:8e:ad:8b:ee:a8:3a:76:0e:
04:8c:87:f1:0f:1d:7f:7f:ac:e8:97:1f:39:eb:de:
e6:8c:d6:fa:ed:9f:dc:e5:56:3a:ad:01:f0:a3:0a:
37:f9:17:55:49:f1:aa:3d:e7:52:2a:18:cf:04:62:
ff:c3:31:70:c3:98:39:46:c8:bf:11:02:f7:05:24:
4a:60:b1:f0:f6:c2:d7:0d:b4:01:b3:91:f9:12:b1:
5e:30:ad:1b:5d:54:be:49:ce:cd:05:d4:e1:ce:41:
f8:3c:da:48:36:9f:15:0f:6e:14:9e:da:87:a0:ed:
df:48:53:09:e7:7e:4c:11:f0:62:45:b6:e4:95:93:
c1:56:cc:b3:56:e9:4a:b1:80:26:90:ba:7c:7d:4c:
7a:26:15:2f:69:a1:e0:f8:61:39:ed:6f:f3:51:34:
e2:b9:fd:e1:16:e7:8c:13:9d:dc:50:f5:54:71:d7:
38:75:7d:08:fa:8a:19:4c:b6:a2:ba:28:8a:4d:55:
4d:56:9e:f4:d1:13:93:31:1a:76:c0:d3:7d:bd:ee:
a5:03:5b:4d:87:ab:71:f4:d9:4e:00:d5:3e:0b:77:
ad:11:f5:04:0a:fe:71:64:ec:aa:34:ed:ac:d1:cc:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214587
Signature Algorithm: sha256WithRSAEncryption
14:cb:51:5d:15:0d:62:6e:54:a7:53:47:37:6f:1c:db:bb:3f:
c4:b1:24:47:aa:f1:ce:58:38:91:f3:c4:3b:6e:51:10:c5:81:
47:f7:03:49:14:53:d3:3d:eb:20:a1:fa:3b:5e:37:e1:78:56:
36:db:8e:fe:ed:d8:c6:87:8f:ae:59:34:bc:7c:b7:68:01:74:
c3:83:ab:43:72:a0:e3:4e:74:ec:df:5c:ab:1a:2f:c7:ee:c7:
db:85:c1:c1:e9:c3:5f:9a:7a:2c:fa:55:bb:90:7e:76:e1:9d:
38:ad:cf:d8:2b:76:96:6e:b7:0d:c5:3d:47:f6:1a:d5:ba:6e:
7b:59:15:ff:b1:bd:cb:b9:d5:73:2c:55:d9:c1:8e:ad:33:fd:
d0:20:dc:fc:e5:b3:d5:26:4a:a5:de:5d:4d:bc:2f:99:33:07:
ab:c4:d9:7b:8e:83:59:bb:cf:d7:56:db:7d:06:32:4f:c5:35:
74:43:8e:92:92:fb:e1:1a:3a:fa:1a:b7:81:4d:0a:ba:fd:70:
aa:07:6f:e9:35:41:5b:9d:66:72:43:e7:aa:30:01:36:b9:94:
f4:15:75:25:9e:f9:59:1c:1a:db:8d:fa:fc:fe:9d:bb:ca:ce:
27:36:04:c0:6e:3a:85:d9:0c:88:73:d4:29:8d:a0:df:2b:81:
3c:9a:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:07 2025 by rpki-client