Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.cer (raw, json)
Hash identifier: J8cYrVPicHOGbTkLQIy095/0G/jIGziDUN/QoVByJ6M=
Subject key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B7E2DE3E5FDA534F2559EAAA72C4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210975
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7e:2d:e3:e5:fd:a5:34:f2:55:9e:aa:a7:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:09:16:90:5e:a4:8a:ab:f9:0c:93:9c:f1:
17:8d:bc:55:bc:53:7d:78:df:5a:39:f1:8e:14:90:
04:da:a0:28:27:82:40:5b:17:55:be:ea:2a:62:5b:
26:e6:50:af:92:f1:5d:8f:17:bb:96:41:3b:06:fe:
01:45:8a:d7:3e:7e:85:56:99:6c:05:d5:f8:e5:99:
eb:16:d8:af:1a:dd:9c:29:0e:b1:4b:ea:24:5a:11:
5e:4e:2d:53:9d:7b:41:b2:70:98:71:df:66:31:6b:
00:53:80:d1:97:e4:b4:d0:39:05:1d:47:16:ee:e3:
ac:81:b6:e3:d4:23:24:27:65:e0:59:45:22:ec:5e:
eb:d8:e7:11:66:97:4e:48:d2:e9:92:62:59:c4:1e:
f2:5e:a3:a7:71:a2:b3:7b:aa:a6:b5:ea:61:1d:f5:
11:ec:17:8d:f7:e2:00:52:03:82:a0:62:fc:94:69:
bb:4f:ae:0f:2d:23:4b:19:65:5d:cc:d0:72:4b:6d:
9d:04:07:00:fc:d6:02:18:86:c4:19:a7:ba:ee:60:
eb:9f:01:44:e9:0f:07:fb:06:d4:05:08:4e:9b:a8:
3a:49:55:f1:1a:21:8c:53:f5:21:65:87:70:06:99:
d0:bc:14:21:90:85:b0:e4:15:bf:0f:02:91:01:89:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210975
Signature Algorithm: sha256WithRSAEncryption
ab:b6:6d:67:e9:2f:b0:31:27:eb:ec:b2:c6:21:8b:73:33:5d:
c0:d6:e5:d5:11:21:e7:1f:03:c4:e3:59:62:4b:20:bc:a0:77:
0b:fa:b5:a2:42:43:9e:89:6e:54:ad:93:76:d5:d4:e8:59:f6:
54:d6:83:ad:c4:69:c5:b9:1a:1c:dc:6a:b2:4b:37:d0:cb:bf:
1b:a3:32:d2:16:af:ed:09:84:a3:04:41:37:cc:0c:e0:41:ee:
2d:35:4f:5b:5c:c7:87:4f:c3:84:6d:55:f9:51:e3:c8:a4:fd:
8e:b4:c5:83:05:c5:00:72:99:74:2b:3f:f0:98:b1:4c:e3:15:
c5:3c:36:a1:d1:8a:81:7a:b4:d7:c6:c7:ca:0f:4b:e1:15:e3:
29:06:41:0c:20:44:fa:88:7d:54:c7:21:a5:d1:79:4d:8a:7d:
d2:5d:66:29:a7:e2:53:f3:c4:26:82:ed:38:2a:41:6b:f4:e9:
61:0e:25:2e:2b:bd:26:83:37:2b:4f:b3:97:1d:83:af:81:d1:
b0:23:f4:9e:73:13:1c:ef:94:8f:d2:2e:bf:d3:7a:62:20:08:
37:a6:c9:83:dc:a3:15:8c:ae:e9:0f:ac:58:86:eb:e5:ea:be:
76:8f:aa:9c:5b:11:87:3a:67:41:df:47:65:2f:16:60:f0:78:
a1:b0:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:19 2025 by rpki-client