Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
File: odFVKaRRyVzNk0rFbsCdUYdQZss.cer (raw, json)
Hash identifier: bidupONyVe03mY1j6FLsBDp5veEzJ/smDTVD6HLZCLg=
Subject key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194AD13C4D7A57F11ECE4DF3BB8C87353A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Jan 2025 13:22:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213568
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:13:c4:d7:a5:7f:11:ec:e4:df:3b:b8:c8:73:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 28 13:22:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:88:fc:10:d4:6f:6a:4c:33:69:60:2f:13:
9e:a3:bc:87:f0:ca:73:f5:a0:51:56:21:25:58:6e:
99:7b:ba:95:d0:7d:95:f4:df:fc:cf:24:f6:e5:be:
67:46:17:36:11:8d:4c:73:3f:dd:3c:f9:df:83:1f:
1a:ef:77:7e:ee:06:be:3d:a4:4b:f5:d0:48:6f:db:
ad:d4:eb:45:10:73:fa:72:e4:8e:a3:a5:20:50:96:
9c:0b:24:94:da:3e:5e:fb:98:2e:f2:83:91:17:05:
ea:cc:8d:65:e5:b8:d8:56:d2:61:af:bd:43:cd:62:
49:b2:53:03:73:c1:82:b2:be:0c:a2:6c:46:f6:38:
07:73:ef:70:00:b5:75:74:85:c7:d0:03:b9:80:aa:
36:ef:07:4e:52:dd:1d:79:52:8a:74:b2:b5:a3:4f:
0e:6c:61:c2:bb:5f:94:62:18:9e:98:8c:8f:d8:f8:
db:37:fa:a5:6e:f4:22:d6:5d:af:c9:3b:4a:d4:11:
ad:26:e1:04:89:0b:ed:67:56:6f:a9:f6:a0:03:67:
cb:3e:16:ef:c7:68:15:3b:0f:e0:da:94:e1:63:71:
9b:9b:f1:d2:06:fd:9b:7f:91:23:af:2d:04:fc:94:
ef:59:fd:94:77:be:39:8a:6a:63:b4:d0:50:89:18:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213568
Signature Algorithm: sha256WithRSAEncryption
3e:19:69:4f:0f:e8:eb:ae:4e:d5:25:61:03:d1:90:66:61:6b:
ea:04:c7:8f:8e:52:fb:2a:c0:7f:02:57:87:2a:43:21:e2:7c:
44:bc:4f:1f:31:51:01:3b:bd:2d:2b:b6:7b:b1:39:42:be:40:
5e:2d:81:c8:12:d7:b1:52:57:d0:63:55:6d:02:8c:1f:ad:dd:
84:17:8e:40:32:54:b6:e5:c6:cb:6b:c6:2b:c2:9e:7e:21:2c:
cd:0d:b2:4d:8d:89:85:56:8a:51:01:f5:9c:4e:2f:dc:e2:fd:
df:85:10:42:24:f5:cd:64:6b:1a:22:3a:43:be:e1:91:ed:78:
06:33:67:ef:11:b4:18:2b:64:c7:4e:8f:0c:5f:85:1d:ad:e8:
06:72:e8:e3:50:9d:e3:b7:e6:b6:67:85:68:4a:30:b1:ff:2a:
ae:62:68:b1:0d:35:ad:8c:79:69:92:41:aa:f5:46:fb:48:10:
9e:b5:d9:80:e9:13:28:94:78:d6:ad:10:38:d0:41:3e:ed:f3:
7b:54:bd:1e:1d:28:5c:50:be:58:18:36:31:cf:53:f9:9f:85:
7f:0c:36:37:f9:24:22:4d:71:26:52:12:0b:30:01:01:e6:04:
13:91:ac:7b:31:6a:54:bd:6f:b4:f3:f1:f0:98:7c:fc:86:43:
a0:b1:c4:e5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZStE8TXpX8R7OTfO7jIc1OkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTI4MTMyMjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWQxNTUyOWE0NTFjOTVjY2Q5MzRhYzU2ZWMwOWQ1MTg3NTA2NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVOI/BDUb2pMM2lgLxOeo7yH8Mpz
9aBRViElWG6Ze7qV0H2V9N/8zyT25b5nRhc2EY1Mcz/dPPnfgx8a73d+7ga+PaRL
9dBIb9ut1OtFEHP6cuSOo6UgUJacCySU2j5e+5gu8oORFwXqzI1l5bjYVtJhr71D
zWJJslMDc8GCsr4MomxG9jgHc+9wALV1dIXH0AO5gKo27wdOUt0deVKKdLK1o08O
bGHCu1+UYhiemIyP2PjbN/qlbvQi1l2vyTtK1BGtJuEEiQvtZ1ZvqfagA2fLPhbv
x2gVOw/g2pThY3Gbm/HSBv2bf5Ejry0E/JTvWf2Ud745impjtNBQiRijGwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKHRVSmkUclczZNKxW7AnVGHUGbLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzU5MzFl
My03ZDEwLTQzNWMtYWY2OS1kNmRkYWNmNmEzZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTkzMWUz
LTdkMTAtNDM1Yy1hZjY5LWQ2ZGRhY2Y2YTNlYy8xL29kRlZLYVJSeVZ6TmswckZi
c0NkVVlkUVpzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNCQDANBgkqhkiG9w0BAQsFAAOCAQEAPhlpTw/o665O
1SVhA9GQZmFr6gTHj45S+yrAfwJXhypDIeJ8RLxPHzFRATu9LSu2e7E5Qr5AXi2B
yBLXsVJX0GNVbQKMH63dhBeOQDJUtuXGy2vGK8KefiEszQ2yTY2JhVaKUQH1nE4v
3OL934UQQiT1zWRrGiI6Q77hke14BjNn7xG0GCtkx06PDF+FHa3oBnLo41Cd47fm
tmeFaEowsf8qrmJosQ01rYx5aZJBqvVG+0gQnrXZgOkTKJR41q0QONBBPu3ze1S9
Hh0oXFC+WBg2Mc9T+Z+Ffww2N/kkIk1xJlISCzABAeYEE5GsezFqVL1vtPPx8Jh8
/IZDoLHE5Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:06 2025 by rpki-client