Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
File: p7ZLX1AsUfocwRSIHLpStansHsg.cer (raw, json)
Hash identifier: 0xr/aS7VPwXYvEB7Op0flFA1MYAvgkNj1s4yJxWu6yY=
Subject key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D52189FB2C3A2CE706B5EF4AC9B1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199894
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:52:18:9f:b2:c3:a2:ce:70:6b:5e:f4:ac:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:63:eb:2b:80:70:99:9a:9a:04:96:44:49:
ef:33:e6:e0:bf:0f:80:ec:80:06:ee:9a:73:73:cb:
3a:b5:16:1e:48:66:77:88:74:e1:de:67:b0:38:9a:
88:02:fb:b2:87:80:87:20:60:53:43:a1:0a:17:53:
da:12:c8:75:4c:a2:73:8e:41:20:34:57:97:af:a0:
c3:f9:48:86:98:ce:b6:6e:4d:8c:c3:2c:55:5f:1c:
4f:ed:bd:e5:02:39:29:a2:92:61:40:43:62:ad:4b:
50:79:8b:26:b5:9f:9e:2c:dd:58:97:37:fb:7e:34:
a5:79:5c:61:65:38:98:43:d8:bd:c6:1d:df:63:f0:
93:b0:c6:28:6a:f2:db:52:5b:10:da:e5:b9:de:c8:
3e:3b:d9:c8:72:be:12:4c:e0:a3:4f:47:e2:9c:13:
a9:e3:58:29:01:a4:ad:db:27:c5:19:ee:02:b5:fe:
27:3b:7d:03:7a:77:27:a4:27:ee:71:78:92:4a:ea:
53:07:a9:79:8f:9f:f0:75:62:36:e2:08:be:75:6c:
12:6d:99:0e:f5:a3:ec:52:ff:35:97:47:5d:db:30:
5c:51:bf:94:7f:ee:94:90:ac:e1:4f:09:d3:df:fe:
7d:7b:78:8f:6d:b9:8f:f0:55:a0:db:c2:7a:4f:17:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199894
Signature Algorithm: sha256WithRSAEncryption
9e:eb:38:61:49:b4:78:d8:a2:db:3c:8f:f2:72:b1:e3:c6:1d:
6a:b4:dd:af:a0:33:3f:5b:e5:55:05:22:ff:5f:7a:73:00:d5:
c9:27:d6:c5:44:0d:59:10:ab:d1:6a:de:b7:68:73:43:f4:0e:
10:5f:ea:35:75:7e:ce:d5:81:bd:30:3a:4f:7d:e4:c8:d8:5c:
fb:d1:3a:08:1f:2a:28:29:47:3d:bf:ed:aa:37:23:1d:f9:e5:
3f:47:b8:ee:92:07:b3:09:4a:f4:71:ff:60:e3:8f:52:32:d3:
09:3d:c9:5c:69:b9:1d:86:d6:48:fa:c5:fc:e9:3f:6e:4a:1b:
b6:a3:86:ed:53:eb:39:bf:d3:58:2d:42:21:65:da:83:e4:08:
18:43:bb:7e:d4:29:5f:b5:a5:e2:e0:2a:54:08:77:f3:15:85:
85:df:53:55:8d:e8:7b:f4:f8:4f:85:f6:b5:d5:fe:5c:96:ae:
f8:84:7b:45:d6:e7:43:d1:21:3c:65:d1:66:65:db:4d:91:09:
08:31:44:c9:d9:d1:c4:e8:90:a0:28:0f:51:f3:89:e0:b6:9d:
52:ab:74:f6:b3:1b:40:15:4f:52:1a:f0:96:1a:e8:46:e8:50:
66:b2:6a:2d:61:a3:f2:5a:db:c9:87:c5:31:ad:b2:cb:7f:af:
62:62:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:15 2025 by rpki-client