Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer (raw, json)
Hash identifier: 7bLAtQvt2oHYu2wo3tqXPDeKTt3doP/jDcFgrjWvHcE=
Subject key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B65E27D27F736691AA388C56C9F6BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30754
IP: 217.71.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5e:27:d2:7f:73:66:91:aa:38:8c:56:c9:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91362d3c0953e8c933f0092a589b75494904f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:6d:50:d0:6e:47:bc:17:c8:c0:f5:64:45:
ac:e7:8b:47:f3:78:1c:75:21:89:96:a5:e1:dc:1a:
05:56:67:fc:16:65:eb:30:85:b8:b5:d0:be:d5:06:
87:ba:57:86:aa:9a:24:03:1a:34:20:5a:aa:df:07:
19:73:f4:f8:9b:88:fb:61:b7:53:f1:ca:02:99:c8:
c4:73:16:6b:64:a2:59:69:eb:02:c5:fd:51:2a:81:
09:54:28:07:44:88:4e:e6:39:2a:81:85:f7:44:45:
52:dd:5a:da:df:35:52:f0:90:6b:7f:cc:7a:f5:9c:
63:ac:e1:4f:fe:68:d6:31:9f:2b:64:07:93:ee:f0:
f2:23:f5:68:bf:78:cb:35:5a:7e:5e:37:01:11:90:
b9:1b:2e:d1:8a:c3:8c:62:c7:30:9b:8e:4c:95:57:
92:75:40:e7:ef:b7:a9:f7:6b:f1:0b:ef:27:e8:dc:
5d:1d:bf:95:a9:6b:6e:cc:bf:8d:c0:7d:88:88:fd:
4d:6b:ee:5f:e4:3e:7e:61:2f:7a:78:c2:c9:85:c2:
a3:64:de:d4:b1:22:4d:d3:a6:5a:e1:48:0b:b0:7f:
17:cb:16:ae:f9:16:be:ba:6c:8a:b1:26:8a:25:da:
c3:48:9c:15:85:42:d0:db:b6:91:ec:40:e0:26:d8:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.71.144.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30754
Signature Algorithm: sha256WithRSAEncryption
8c:71:72:c1:25:6d:2f:ab:c3:17:c5:2c:7e:22:a5:45:10:2c:
90:76:86:56:c5:43:62:86:7c:c5:3d:bd:22:b2:92:3f:c1:f5:
84:f8:9b:25:ae:e2:e4:7c:3e:e6:87:64:0b:2e:a0:4c:71:a2:
22:41:32:93:11:08:3c:8a:f0:f0:34:5c:9e:6e:65:27:e0:73:
bc:81:2b:16:0d:76:3a:76:29:f2:4b:5f:c7:6f:1a:ff:a7:30:
6f:cd:8f:6b:3c:f2:85:92:9f:fd:43:ea:02:78:fa:a4:5f:82:
1c:15:d2:f0:95:95:f1:a3:29:8f:46:8e:ca:59:22:43:db:8e:
1a:66:49:a1:a3:75:7a:1e:03:12:8b:75:7f:76:66:6c:86:58:
0e:5c:75:38:f6:6a:6b:fd:8f:36:fd:2a:6e:34:5b:d4:90:7e:
f4:95:29:4e:15:13:77:42:07:2c:10:c5:2d:e8:d0:05:86:cb:
7a:19:68:b1:a9:09:41:0c:92:67:8c:73:72:8d:8e:17:4e:0c:
88:75:2b:7f:d1:d2:e1:05:19:c6:75:8c:59:39:97:9c:e3:1c:
95:34:a5:75:b7:ec:25:61:95:5c:be:fa:bd:73:f3:61:15:1e:
36:bf:a5:45:af:dd:0a:e6:ea:16:18:51:c7:b2:f3:d8:fd:26:
21:7b:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:28 2025 by rpki-client