Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer (raw, json)
Hash identifier: Oe4c+YJRq0UNWO2twIyDGqTpIlQ6HaT0L7idgEk+sLI=
Subject key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C716D99FDCE2C7EBDDD7466178747
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207740
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:6d:99:fd:ce:2c:7e:bd:dd:74:66:17:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:d7:e0:b6:88:8d:53:e6:88:1c:a4:08:cb:
ad:7e:e9:26:40:d4:9f:72:17:1e:da:7f:d6:cf:8b:
5b:a7:be:90:e6:f5:47:4a:9c:25:49:ed:ab:4d:24:
23:19:88:1d:23:b2:b3:46:69:1f:66:bf:7d:88:a3:
ff:b1:d1:7f:cb:7a:0d:fa:56:73:24:5a:da:df:70:
09:da:d1:ce:e1:6a:8f:0d:76:0a:44:08:d4:ab:3f:
56:42:20:7a:c3:6e:a4:42:5c:33:f0:f5:03:ca:3a:
62:85:d3:65:db:94:62:e4:f9:79:e9:69:aa:02:9a:
66:6b:04:3d:6c:76:8f:f8:44:20:2b:2f:2b:ac:d5:
ee:7e:97:ca:ba:52:93:dd:d1:b0:a8:2e:2c:e2:b5:
09:12:b5:bc:de:07:22:51:e1:42:9f:e1:ab:56:4d:
5a:87:35:fc:dc:ec:f9:4b:f1:d3:5b:df:82:22:e2:
4b:17:fe:96:83:a1:ef:1e:88:2c:8b:35:fc:36:97:
05:e4:ae:35:44:7a:c0:96:48:5f:5d:d1:62:0e:86:
04:f8:d6:61:74:78:73:fe:9f:90:ad:8a:ed:43:a7:
84:8f:3e:54:b1:69:a9:2c:e9:3c:30:5b:b8:04:dd:
e2:c9:c6:cc:43:d3:04:38:00:67:99:da:2f:0e:f8:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207740
Signature Algorithm: sha256WithRSAEncryption
59:29:70:65:25:b4:b0:db:4a:5c:10:6f:4c:53:e2:73:20:a0:
b2:25:1c:2a:12:dc:6f:65:b7:f9:61:a8:f5:3e:70:f6:af:81:
62:b7:12:2e:2f:64:34:72:17:ea:aa:f3:28:7e:6f:8b:fb:79:
99:f8:2e:16:0d:38:78:b0:9f:96:4d:90:b8:72:17:61:da:4c:
61:ea:5c:ad:98:73:66:0f:11:12:00:a1:80:6a:ad:b5:fc:7d:
44:4a:1c:e1:7b:f5:6c:fe:8b:70:d5:22:55:84:27:c2:51:34:
a9:a2:9b:8e:95:68:ce:e5:5a:ac:f9:19:85:b9:49:34:81:d0:
26:4c:05:ef:9f:82:45:f4:09:c8:dd:48:8e:4d:be:39:b0:74:
bc:58:0a:69:89:d7:76:85:4c:a8:69:83:b5:f2:4a:21:6a:d5:
b9:e5:5c:3b:c1:2d:cb:ba:56:34:c9:c4:f6:fd:0b:68:9f:aa:
43:14:e7:d5:fd:e2:71:94:cd:ca:03:08:34:b4:4b:64:bc:5a:
bb:12:50:a6:e2:32:50:9e:fc:36:62:b0:8d:89:25:f1:e6:df:
1e:ca:0b:81:24:10:4c:2e:e8:47:0b:ec:69:b5:c0:29:89:8d:
ed:82:ec:05:24:17:e0:93:2e:43:49:9d:59:30:1d:5d:c6:dc:
9b:16:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:25 2025 by rpki-client