Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer (raw, json)
Hash identifier: iiT5hOspoquleY32VjrXxk2oO6mX7CwhOEiqxYwO1Hw=
Subject key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2168A8B898F500E41AA278E0D1BC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197601
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:8a:8b:89:8f:50:0e:41:aa:27:8e:0d:1b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:cc:ce:31:40:da:cc:35:7d:f6:d9:c8:b6:
70:63:ba:dd:72:75:96:fb:dd:de:3a:0e:3d:ed:10:
e9:88:49:95:e8:85:fa:a6:9c:63:81:b3:e3:27:51:
2a:68:57:ef:f3:dc:28:8d:92:64:74:15:c6:45:45:
bf:d2:1d:3b:4b:ca:12:c0:af:a1:8b:73:9d:c0:ce:
bc:66:d0:d9:79:e4:34:d6:99:d5:28:03:00:81:cd:
69:79:4b:11:10:06:0a:07:34:2c:18:5a:4f:d4:f7:
be:ef:cf:45:cd:cc:00:df:81:84:52:cd:8b:6b:b5:
e0:8f:6e:3d:84:a4:6a:fd:c4:97:bc:5b:03:82:10:
88:29:ba:b0:2f:e7:43:87:b5:52:de:b4:5b:79:8a:
1b:94:b6:85:00:c3:7d:43:bb:bf:d9:14:47:eb:ba:
56:61:de:c3:7e:ef:8e:14:ef:c8:58:6c:2a:08:c7:
b0:ab:ac:33:8a:79:eb:66:2e:f1:7a:1e:63:aa:f0:
89:19:5c:dd:70:5a:f4:0d:cf:90:54:7a:cd:cc:7b:
0a:78:1c:86:cc:83:c0:2b:e5:3f:3f:67:da:bd:ef:
79:0d:6c:a3:42:68:6d:8e:46:8a:be:ad:6d:85:69:
58:42:59:f0:92:a6:74:30:d6:be:29:5d:2a:09:e6:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197601
Signature Algorithm: sha256WithRSAEncryption
6b:e2:13:df:ac:bb:e9:10:76:78:a5:81:ec:e2:db:47:1e:5c:
a5:69:f0:d6:ee:f5:d8:03:4b:5e:96:2e:11:73:c5:50:36:39:
74:16:7c:f6:d2:60:4c:20:99:3a:4f:9f:8f:ca:e4:a6:cd:09:
37:b2:27:c8:98:16:44:c4:25:f3:6d:d8:b2:58:c5:90:f7:e4:
ee:13:ab:c6:8d:82:29:d8:5c:17:57:25:77:87:74:d2:60:f4:
3a:37:c3:49:ff:1b:b2:fb:e2:f4:6e:88:9f:07:e2:fd:b1:21:
b7:03:0b:57:22:33:c3:d9:e3:d4:99:78:a9:ca:f2:7b:e9:11:
cc:db:d8:11:29:f3:dc:c3:fe:83:93:17:3c:7a:87:60:39:e0:
4c:8b:99:10:d7:5e:b8:6b:47:9a:72:0b:3f:c8:b4:05:fd:3e:
16:77:38:11:59:35:14:0d:b2:12:75:cf:f8:1f:6b:ca:0c:b6:
f7:56:1a:5a:60:0d:05:2c:95:f1:51:84:f7:6f:44:32:00:f3:
20:c5:aa:46:3c:81:1d:b8:4a:7c:12:a4:eb:98:c9:be:27:3b:
39:1a:07:98:98:bb:ba:12:97:5c:77:e4:12:a7:01:a6:59:2e:
17:14:a8:5f:9b:86:a9:ac:78:80:c2:11:26:92:00:9e:65:65:
a1:ae:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:41 2025 by rpki-client