Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer (raw, json)
Hash identifier: FxWKxR8/ql8IQvbC+6tyys1ECrwMd5hXDYI/I2DKmb8=
Subject key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D12FBCCC12D7E565C3D620FC4983E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215096
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:12:fb:cc:c1:2d:7e:56:5c:3d:62:0f:c4:98:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:25:45:68:11:fc:17:09:0e:8c:96:dd:1e:
ca:72:44:1e:27:04:7f:e9:03:56:46:14:c8:c7:69:
c5:23:4f:34:88:b3:23:f4:d9:65:89:53:4d:f3:73:
d0:8d:8e:23:e0:52:65:5e:ee:46:91:74:12:66:1d:
eb:18:ed:1d:72:1a:aa:8d:b7:8e:a5:1f:57:32:f4:
51:2c:de:e0:87:5e:eb:67:37:13:8f:a8:98:ff:0b:
13:2f:d6:e9:03:e3:ae:e1:76:fe:18:18:00:5b:1c:
48:17:ba:8b:dd:e9:2e:f5:46:36:4c:e7:af:95:9c:
70:56:f1:14:1b:ad:54:17:48:21:2f:88:6c:25:1b:
c6:ed:35:f3:9a:ee:53:36:34:a8:f0:5e:bc:11:84:
ba:41:d9:bd:1c:3c:26:e7:78:89:f1:bc:e6:c1:1f:
b3:db:4c:64:3e:b0:62:44:a8:6b:9f:00:11:77:be:
c0:7f:0b:46:fa:9d:83:92:4e:47:57:3d:de:5b:b0:
6a:e5:d6:9c:12:a2:7d:54:b0:00:23:5d:11:c6:02:
c5:7d:ea:49:ac:87:64:a8:37:cb:5a:92:53:f1:19:
29:a1:10:73:64:43:8b:77:6c:5f:78:d6:dd:e5:81:
82:58:2f:bc:83:e3:c1:b9:4b:b7:56:f2:fd:97:27:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215096
Signature Algorithm: sha256WithRSAEncryption
7a:b4:4a:b9:a2:6b:28:c2:ae:a2:42:46:ba:4e:4f:12:ad:fa:
21:ed:fe:42:89:0a:5b:bc:c8:2e:25:a4:09:5d:61:83:ea:0b:
0c:5f:02:3a:e6:d0:72:5f:39:e0:21:68:07:9c:fd:25:47:b3:
14:4a:9e:f5:22:94:32:1a:29:44:bf:b5:63:13:01:c4:6d:36:
68:c4:21:b9:88:f1:d7:fb:e1:11:ee:a1:d8:ba:1d:c5:72:94:
9d:85:a7:8c:ea:e4:ed:57:35:30:62:eb:6c:4e:ca:93:c2:a8:
3b:2f:76:33:27:f4:7e:7b:18:cf:fd:35:cf:4b:bf:54:b3:6c:
d7:03:2d:7a:bb:66:97:5c:5f:0a:68:23:f3:e2:4c:07:bc:d1:
0b:05:2f:e5:f5:63:e8:f7:e6:09:bf:b1:ed:0c:20:c7:88:d1:
cb:9f:e1:e9:46:10:ca:2c:71:6b:f5:6b:98:f1:b0:bc:91:8a:
a7:f6:cd:ee:8a:59:29:7e:96:34:ac:b4:dc:a0:70:5f:aa:79:
40:df:27:51:29:c7:7a:88:14:99:6f:53:37:e4:51:d1:a6:c8:
8d:e2:8a:2f:c5:62:13:bc:3f:e4:02:35:f6:b0:90:35:a1:56:
9c:3b:c9:a4:32:da:82:f9:7e:5b:fe:99:64:00:af:d4:45:61:
06:9a:dc:52
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQijRL7zMEtflZcPWIPxJg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmQxZWFhZDBkN2U0NjcyNmI4NzA4MzkxNGMyNGExMjdlMDU5ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xglRWgR/BcJDoyW3R7KckQeJwR/
6QNWRhTIx2nFI080iLMj9NlliVNN83PQjY4j4FJlXu5GkXQSZh3rGO0dchqqjbeO
pR9XMvRRLN7gh17rZzcTj6iY/wsTL9bpA+Ou4Xb+GBgAWxxIF7qL3eku9UY2TOev
lZxwVvEUG61UF0ghL4hsJRvG7TXzmu5TNjSo8F68EYS6Qdm9HDwm53iJ8bzmwR+z
20xkPrBiRKhrnwARd77AfwtG+p2Dkk5HVz3eW7Bq5dacEqJ9VLAAI10RxgLFfepJ
rIdkqDfLWpJT8RkpoRBzZEOLd2xfeNbd5YGCWC+8g+PBuUu3VvL9lyfMIQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJvR6q0NfkZya4cIORTCShJ+BZ3UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2MzNGRl
ZC1kM2Q5LTQyOTItOWJiNy1lZjA3OTQ1MzFhMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvYzM0ZGVk
LWQzZDktNDI5Mi05YmI3LWVmMDc5NDUzMWEyOC8xL205SHFyUTEtUm5Kcmh3ZzVG
TUpLRW40Rm5kUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNIODANBgkqhkiG9w0BAQsFAAOCAQEAerRKuaJrKMKu
okJGuk5PEq36Ie3+QokKW7zILiWkCV1hg+oLDF8COubQcl854CFoB5z9JUezFEqe
9SKUMhopRL+1YxMBxG02aMQhuYjx1/vhEe6h2LodxXKUnYWnjOrk7Vc1MGLrbE7K
k8KoOy92Myf0fnsYz/01z0u/VLNs1wMtertml1xfCmgj8+JMB7zRCwUv5fVj6Pfm
Cb+x7Qwgx4jRy5/h6UYQyixxa/VrmPGwvJGKp/bN7opZKX6WNKy03KBwX6p5QN8n
USnHeogUmW9TN+RR0abIjeKKL8ViE7w/5AI19rCQNaFWnDvJpDLagvl+W/6ZZACv
1EVhBprcUg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:02 2025 by rpki-client