Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
File: lN4Clz3AXsPGu_ble31qTO74GF4.cer (raw, json)
Hash identifier: 3ByrUZ0ZvK7S85vud+Y4EGAE/3TDsA+TfKHTrLB2j8o=
Subject key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424450313E45BFE115DD8604888974760
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210058
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:03:13:e4:5b:fe:11:5d:d8:60:48:88:97:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:02:f9:35:fc:06:aa:42:f3:39:6d:c6:74:
94:d6:cd:0f:0b:d2:fb:03:f0:75:d0:5e:f1:98:e2:
20:3d:ec:f6:87:35:bb:cf:75:1f:e7:d9:3e:cb:ff:
70:1c:5a:17:2e:9e:c9:7f:e9:de:a0:99:fe:6f:a3:
47:b5:87:97:30:d2:db:4a:37:de:9f:5c:d8:e2:34:
b1:14:1e:f9:70:1c:21:46:bb:a2:53:41:fb:31:6a:
aa:b5:1d:a5:7f:a6:30:e8:f6:69:04:5d:6b:25:84:
58:61:92:e8:62:2a:18:94:41:68:43:6c:25:d7:5e:
22:ee:f4:9d:03:fb:bd:07:69:9e:77:dc:b7:6a:4d:
77:3e:64:94:f5:57:c2:47:12:a9:82:fc:9c:8a:e1:
4e:5d:c0:e9:e8:48:c6:cd:fc:aa:5a:47:9b:ab:6d:
0c:b7:33:11:98:f4:90:39:15:50:d9:21:6a:10:94:
2c:77:59:4c:94:d3:bf:20:d1:96:34:15:8a:b4:3a:
57:c5:de:b5:a1:2b:8a:e5:14:d1:b0:63:ac:17:39:
90:1f:d3:60:50:8f:84:12:4f:4b:e9:e2:6e:1e:50:
6d:f4:f4:6a:3c:6e:49:a9:8a:f8:8c:da:9e:72:94:
48:ab:3b:f1:d0:cf:3c:5b:34:c9:61:11:68:69:71:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210058
Signature Algorithm: sha256WithRSAEncryption
85:7d:30:9e:c1:7f:ba:07:fe:b2:f9:c3:b8:33:31:34:e9:99:
c6:99:f7:c2:f1:50:13:a0:93:96:83:26:08:ab:15:92:af:c9:
71:6c:5b:28:85:40:ab:f9:ff:62:c8:5c:11:53:c6:cb:26:b5:
5a:90:90:2d:f7:e0:32:80:56:a7:c9:d5:5e:2e:60:c3:32:5c:
7d:5f:99:5e:90:97:91:b3:5c:66:69:29:e2:cf:c4:fc:9d:a6:
7b:7a:74:4f:b4:df:82:18:8f:c8:f8:ea:a3:75:b8:26:d6:a0:
36:ca:46:64:4b:26:3f:27:67:4f:ef:df:ec:64:76:da:77:2e:
dd:9d:7f:8a:68:9e:80:eb:65:24:31:e9:16:a3:c9:c7:80:44:
ea:d8:ab:a9:0c:8f:97:99:25:6b:90:34:26:90:b6:da:ac:58:
cf:9a:b0:d9:13:0c:d8:ac:ea:ab:60:e6:21:41:67:6a:f9:1d:
00:4e:23:12:1c:a6:b3:46:7c:58:7d:fc:5b:e7:40:4b:ca:2b:
7b:06:37:5a:d9:19:1f:f3:be:20:01:8e:63:ce:c3:54:54:e7:
ac:01:f4:25:17:27:3e:79:47:62:62:f0:8e:5a:7b:98:13:30:
c8:8a:3e:c8:d8:39:23:d3:24:53:5c:93:da:83:89:04:a6:45:
53:b5:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:17 2025 by rpki-client