Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
File: navGJqwmQGaxxccJpIR383iDYd4.cer (raw, json)
Hash identifier: e6nwuKwt7Fjl4ZXnIKA0vu6zH27xDotJc4fdhqyqi7U=
Subject key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5974540EF1D6CEE7D4FDCCF774BC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212746
IP: 2001:678:c2c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:97:45:40:ef:1d:6c:ee:7d:4f:dc:cf:77:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dabc626ac264066b1c5c709a48477f3788361de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:2c:d8:56:7b:9c:1d:de:86:17:8b:22:e7:
78:3d:98:9b:5c:b6:9e:6d:7a:29:2c:16:a2:8c:0d:
8d:1b:fe:62:65:c4:9c:42:07:44:a1:9a:c5:04:29:
d1:01:57:7d:db:5f:6b:82:30:3e:4c:a1:d0:ce:33:
9e:93:bc:44:7a:77:0a:74:c9:fa:7f:4e:18:09:16:
65:97:fa:aa:a2:fa:1b:f5:0d:60:63:95:12:52:26:
1a:01:a1:97:e9:d3:5f:f9:b3:91:27:f0:df:5c:fb:
03:ee:f5:ce:c2:a3:c4:6b:d3:5b:38:4c:91:5c:97:
dc:70:1c:95:54:9e:78:ec:a3:22:ff:db:82:92:69:
60:a5:31:e3:15:97:f3:72:4e:d6:e9:d8:1a:31:8f:
bd:b9:75:c5:77:49:9a:1e:56:ac:30:a2:62:eb:ee:
e7:90:08:91:e7:b5:4c:0e:f9:53:da:8e:6c:c4:4d:
13:bd:25:85:89:c8:c6:c1:e4:9f:5b:4a:cd:04:bb:
d3:c6:7d:08:03:07:6f:78:92:87:ce:a2:8a:5c:ec:
cc:0a:07:8d:da:14:86:4d:e7:0e:81:10:6b:b0:52:
95:91:ce:a0:cb:73:bf:1f:c5:e1:8b:25:b7:79:2f:
3a:99:93:8f:07:0a:65:9c:6f:07:85:44:e6:09:f5:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c2c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212746
Signature Algorithm: sha256WithRSAEncryption
0d:79:24:4d:af:89:67:04:13:4a:6c:ab:3a:aa:c4:43:dc:7c:
16:e0:1f:b5:6b:5d:06:8c:5c:2a:e6:0d:e3:c3:18:8e:21:3c:
ef:e3:6f:76:c2:74:b4:c4:4f:7b:77:d8:62:6c:ec:03:a0:6c:
f6:d1:53:41:68:e8:7c:52:cf:d4:af:e5:c6:91:4c:b8:73:d4:
b7:0c:59:73:b2:a9:86:70:5e:e2:d9:72:fe:4d:e8:2d:fb:71:
b5:6a:1c:74:98:85:b8:84:76:51:6f:dc:9a:31:5e:47:14:cc:
47:af:67:81:dc:f8:f2:e9:ec:44:56:b0:ad:b1:41:46:ea:41:
41:4d:e7:b5:ac:fc:cb:af:61:d2:94:20:a6:4e:82:07:34:6b:
78:4a:9a:72:73:a9:bd:0f:47:a6:61:78:28:52:50:33:6f:5c:
81:07:c8:7f:12:ea:dd:98:6d:6f:8d:34:1d:db:30:be:de:5c:
7b:39:a8:ee:ca:c5:e3:6c:1e:f2:3a:b8:be:ed:91:f9:a1:68:
de:98:1d:8d:18:dc:37:b9:37:d9:2c:69:e1:d2:d6:f4:50:25:
df:a3:bb:59:27:0f:cb:7e:7d:b3:71:f2:da:0a:c8:5d:38:b2:
14:96:46:98:32:39:09:35:d5:e1:4e:3f:77:fb:a8:94:fd:c5:
1f:3a:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:12 2025 by rpki-client