Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hD524S0l3izPRxnfAlToU5UO7rk.cer
File: hD524S0l3izPRxnfAlToU5UO7rk.cer (raw, json)
Hash identifier: yrqcwbw2GCM1FXzP6oeZa6mbXqGSsU7Gh51b53Ar+nU=
Subject key identifier: 84:3E:76:E1:2D:25:DE:2C:CF:47:19:DF:02:54:E8:53:95:0E:EE:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D718AB48055793021C9F21F9B7C96B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8200
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:18:ab:48:05:57:93:02:1c:9f:21:f9:b7:c9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=843e76e12d25de2ccf4719df0254e853950eeeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:55:3f:0a:c5:5c:a6:3f:e4:28:48:db:cc:
e5:5b:ec:07:f8:74:2a:38:d6:71:2c:bf:aa:75:83:
59:bf:2b:14:cb:29:28:ed:20:36:38:10:ea:ab:96:
b3:78:e3:7d:a4:ef:cb:84:24:e3:7a:1a:68:e5:11:
bf:33:e6:d5:72:60:90:8a:68:03:fb:a9:c0:86:60:
75:1f:c9:d5:1b:12:83:4d:92:0d:bf:86:8d:ad:87:
05:b9:60:d8:d5:fa:d9:25:b6:40:8b:60:02:4a:2c:
2c:34:d0:b1:19:dc:b1:02:ed:c9:a1:d8:d9:47:76:
42:a5:0b:05:6f:b1:da:2a:d7:f0:61:21:11:8e:32:
4f:ee:33:64:29:70:1f:5c:c9:e4:06:7e:27:30:91:
40:f5:ca:50:f2:55:02:ec:5f:8c:c6:de:e7:e2:31:
c8:f9:5f:c2:34:db:33:f1:2e:29:f6:65:51:56:b7:
e2:90:da:62:3b:2a:53:04:7b:49:b6:5b:e0:e8:d2:
42:1c:c8:f2:ff:00:4a:0b:1b:50:8c:ee:08:ea:47:
b7:cd:98:a9:33:ed:f2:9b:f9:02:6e:1b:64:5c:ef:
4b:96:15:15:17:1f:cb:98:9b:b8:4d:ce:2d:d0:fd:
54:26:20:32:fe:4f:06:ab:11:36:0f:f6:fd:c3:c3:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:76:E1:2D:25:DE:2C:CF:47:19:DF:02:54:E8:53:95:0E:EE:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8200
Signature Algorithm: sha256WithRSAEncryption
67:62:d2:b1:2b:ef:a7:dc:3e:13:67:b6:86:c6:bb:bc:1d:e5:
50:45:3c:06:74:df:5b:15:47:71:cd:6e:91:72:7e:38:b4:14:
91:26:95:8d:35:52:a9:95:b3:4e:ef:18:44:d7:57:c3:8b:05:
cf:71:a8:ad:53:1d:58:bf:ea:8b:1c:2b:4c:17:ca:5e:dc:5c:
ec:11:d8:b1:d6:1e:1f:19:6c:31:e1:51:da:28:f4:fc:96:51:
1b:0b:4f:92:7a:91:df:a1:08:bd:6e:9c:23:8a:8d:a8:56:de:
0b:25:02:06:ea:7e:35:c4:53:93:51:0d:7c:16:f6:d8:3a:d4:
05:31:79:ca:34:de:0f:09:6c:ec:fe:4c:01:b8:08:f5:35:2e:
b9:68:b0:4b:a3:80:56:e9:98:44:c3:71:b9:25:ad:2e:90:f2:
09:e2:93:e2:ac:75:23:7f:e3:f6:f7:e9:ab:27:08:e8:45:61:
64:00:87:e0:5e:c0:a7:30:16:a1:13:3e:90:ac:61:ae:a1:bc:
ec:d9:09:f1:e5:88:20:51:4f:8e:02:2e:4e:00:ec:6f:ca:c4:
40:ab:a9:cd:90:75:58:9a:dc:ce:d5:56:f2:6c:eb:14:af:19:
07:b1:d6:84:01:3f:4b:c2:7d:d2:ca:3f:16:06:51:09:d0:25:
e3:71:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:19 2025 by rpki-client