Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer (raw, json)
Hash identifier: vz/rnA9EQOq6kXRMAzSX6jOxIUJxNUj0KVRMubvHyII=
Subject key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823F127D64E16FB1B4E9EAA3D70F1FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211529
IP: 2001:67c:14ac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f1:27:d6:4e:16:fb:1b:4e:9e:aa:3d:70:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9928b812e2e9f472eec7d233f604af263e850f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:7b:ea:52:e3:93:61:c2:d7:34:fd:fd:3b:
f7:76:73:3c:97:7b:3d:6b:05:34:bf:b9:f4:cc:da:
27:09:74:0b:11:6a:0a:03:96:91:41:70:3b:e1:eb:
9f:38:b7:e2:c5:3f:77:e3:c1:39:f2:f4:03:72:72:
59:37:74:f8:c8:0c:1a:6e:bf:a7:18:21:b2:2c:7d:
96:90:a1:a5:c1:29:44:2e:21:02:59:37:c0:4c:1c:
3b:df:02:b2:83:07:79:ed:3a:15:dd:97:41:93:d1:
2e:7c:b7:8d:15:70:83:e2:ec:7a:19:99:6a:2c:f3:
42:ae:dc:a8:fd:e9:be:dd:4c:30:6d:8f:c2:cb:9e:
e9:cc:f1:bf:05:23:73:29:0f:d7:20:de:ff:4c:db:
5b:a2:b9:8e:4b:48:91:1b:50:e6:15:b3:65:ca:ba:
a0:c6:d0:3d:2e:4e:f4:4c:c8:b4:9a:be:1d:53:cd:
45:28:59:92:f6:d7:00:f0:aa:cc:5a:08:e2:b8:2c:
fc:1b:3d:95:4b:5a:80:77:55:87:5c:54:79:ea:f3:
1d:a7:5f:93:3b:6a:8d:da:cb:ee:01:cf:02:c1:fe:
7d:8f:33:79:71:93:0d:6e:0e:2d:30:04:d9:85:b0:
eb:43:b0:ab:cf:14:f3:61:e2:39:e8:40:c9:07:49:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14ac::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211529
Signature Algorithm: sha256WithRSAEncryption
19:dd:e1:0f:a8:19:e7:d7:84:ec:c2:ea:b1:f8:0b:54:3c:d8:
7a:3c:20:e3:12:77:d9:3b:60:83:d9:bc:35:c2:30:39:bd:5a:
dd:99:a1:55:48:8b:86:9d:b2:42:b7:45:53:ca:0b:1b:e0:48:
dd:e9:43:73:9a:cc:d8:34:fc:34:97:c7:04:50:8d:ad:7d:85:
f4:bc:0a:76:61:78:0e:d7:6f:87:3f:f4:fd:33:83:7d:0e:00:
eb:89:88:16:ed:34:60:49:81:c3:f0:11:de:95:2d:ea:5b:ce:
c2:7c:ef:01:e0:b9:5c:f4:fa:d5:32:d3:84:9f:de:fe:51:ca:
cb:9c:c6:c3:f1:8b:a6:3a:20:01:d7:cc:71:cd:2b:96:2c:f5:
8d:49:f3:24:08:06:e0:bc:b2:8c:eb:26:ea:e5:07:b8:8f:c9:
92:bc:c3:a4:84:50:f3:3a:47:d6:4b:55:b7:90:9e:79:24:4b:
db:a7:47:7b:c9:ed:87:fe:d3:00:25:5d:81:47:94:13:31:90:
4e:00:f6:76:bf:53:9d:b9:26:40:85:9d:34:e0:4f:77:2b:c7:
9e:27:93:bc:f2:42:65:93:ce:16:d9:47:3f:87:25:72:44:54:
75:a6:d4:7c:62:e1:d8:00:82:19:c7:62:82:a8:70:ca:b4:27:
06:7f:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:16 2025 by rpki-client