Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.cer (raw, json)
Hash identifier: nnKeBAz2LvYkyU/lIwbsuIHYlTXqq/YogUV5arE8PQM=
Subject key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD3C256A25A37517774B2C0D07CFEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209520
IP: 2001:678:8fc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3c:25:6a:25:a3:75:17:77:4b:2c:0d:07:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a535bf2450573741f9435e94821016a22e6bc147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:44:54:ba:2f:12:b1:3c:d0:de:0f:f4:07:
a1:18:41:52:60:c4:f3:46:b6:af:ee:6f:5f:f8:19:
2f:24:56:84:38:1d:2c:fa:7f:ae:88:37:bd:6e:a9:
09:f3:fb:d9:41:94:0a:e8:97:76:6f:4b:0a:95:e2:
72:a7:fc:63:56:3f:35:d6:a3:1c:4d:4f:35:c8:5f:
88:24:b7:6f:dd:23:3e:77:d3:95:f5:6e:71:1f:7e:
29:98:26:4f:90:64:4e:8f:a9:42:13:ed:06:d3:88:
38:58:25:ea:5b:3b:d1:0e:e5:99:6a:d4:d2:53:91:
c5:57:4c:7f:e9:6d:39:15:fd:1d:f2:69:60:a6:4b:
98:3f:1d:e9:fa:3d:a8:3b:8c:c8:86:51:73:b2:75:
e8:07:97:8d:c4:a5:84:cb:04:2f:bc:e8:d5:86:b4:
7b:a2:7d:bc:cf:b8:dd:8a:77:28:f8:0b:c8:a5:98:
f3:28:ab:45:a2:08:e7:b6:af:52:6c:88:c9:92:2a:
03:d5:2b:be:a1:33:9d:10:9e:18:78:88:f5:91:30:
cf:59:4e:ed:d6:c3:81:83:c9:85:4f:cd:12:d4:ba:
e4:1a:ba:b9:f0:b3:7d:34:73:20:ce:4b:3a:49:59:
a8:68:fc:e3:1c:15:5a:ae:6c:1a:28:0b:96:11:22:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:8fc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209520
Signature Algorithm: sha256WithRSAEncryption
8d:18:07:f2:c8:81:2b:74:5f:57:1f:54:44:96:e3:f8:47:8a:
a2:48:2a:01:79:b6:e4:5d:a6:c5:28:c4:2f:bd:64:28:70:3b:
5f:22:16:20:fe:fa:08:42:77:38:45:3c:05:a2:f4:d5:b2:67:
e5:6c:2a:10:85:bf:47:9f:c9:e7:e5:66:af:27:cd:5d:f3:3e:
0b:ec:2e:c6:c7:87:0a:aa:c2:f4:dc:96:9c:f6:7c:c0:50:b9:
26:26:9f:05:cf:45:8c:c6:2a:64:4f:66:11:c7:4c:08:ed:e2:
1e:90:2d:23:d7:cf:d4:9e:3d:b7:9e:d7:6e:ed:72:a1:28:27:
14:2b:b3:80:56:0f:81:f1:40:a0:9e:2a:d7:19:d7:a0:a6:c8:
09:f2:e6:76:6e:23:58:b0:ec:8c:ac:53:7e:67:1a:be:a4:a4:
83:b3:9d:81:f9:d2:a1:7b:5a:21:da:9f:4d:88:4f:90:1a:b4:
13:cb:47:a7:b9:3c:e5:59:11:d6:08:28:c3:b0:b2:ca:6e:49:
76:75:1b:43:3a:b1:64:b2:b2:1c:f4:11:15:0d:c0:f2:f6:03:
be:e1:10:08:15:11:76:28:09:b6:90:ab:25:b7:38:69:10:50:
47:4f:be:38:65:b0:95:81:1a:e6:8b:2c:e4:ba:d4:c1:1a:57:
b6:82:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:23 2025 by rpki-client