Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer (raw, json)
Hash identifier: i7ungLh0JJeAas9/8JEjTkJQPHVlPMKmXuWXy2qRqQw=
Subject key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC49DBE02B4F0BEAF323A1958C2984
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214704
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:49:db:e0:2b:4f:0b:ea:f3:23:a1:95:8c:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7862c299d6088718760a96168272fccbfda970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:5a:3b:58:e5:24:fd:13:80:40:cb:66:6e:
35:2c:ed:9b:9a:f5:18:e1:77:e9:47:98:06:2a:64:
94:08:ab:89:30:0c:a3:e3:85:1b:d0:ab:74:41:b0:
c0:ec:e0:08:34:cd:35:85:55:7e:b5:8c:e4:dd:da:
ee:ef:19:bc:98:f6:96:82:8a:93:01:e8:a3:7c:f7:
d1:5b:96:9a:9a:02:bc:84:bc:29:fb:e2:b9:b9:be:
6c:03:62:d1:db:ba:1e:6d:7b:d7:dc:1d:a6:84:c8:
12:b4:df:49:92:a0:99:2b:bc:94:7b:ac:82:00:08:
c5:3c:59:61:97:98:46:8e:60:35:af:6a:b0:14:d6:
32:ca:d5:7d:f8:0e:89:92:9d:15:0c:67:ff:0f:17:
a3:b8:23:74:cc:4b:0f:15:cd:13:fa:e4:ee:c4:02:
cb:a9:58:07:c0:d0:3a:84:7a:98:a8:ac:45:04:b7:
1a:5d:c0:c4:50:e1:8d:02:18:34:ea:9c:44:33:2e:
91:a1:74:fc:82:8f:3c:74:59:34:b2:09:8e:f1:3b:
cc:00:f4:43:82:b5:b8:a3:cc:f9:5d:f4:be:fa:fd:
63:20:61:4b:33:0b:ef:cb:0c:38:49:54:45:e1:a5:
22:01:d5:e4:47:a3:02:73:9d:ca:87:29:9f:87:da:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214704
Signature Algorithm: sha256WithRSAEncryption
89:14:25:68:4e:24:89:c4:a7:70:9e:0f:c1:a9:e3:f8:77:61:
6b:90:72:62:d4:ff:e4:0c:0e:1a:80:2c:a0:e3:90:94:0a:81:
b4:c6:80:af:40:7e:e2:51:2c:75:5c:6a:6e:ec:b3:92:72:64:
a6:4d:84:10:8e:f3:2d:ea:20:ee:17:9a:e7:00:2e:a8:bf:f8:
1f:47:51:c0:f2:b2:3b:ff:d0:5a:04:12:0d:6f:83:3c:b4:28:
b3:5d:31:27:36:ce:bb:11:4a:9a:67:c1:b3:e5:20:7b:0b:62:
d9:8a:47:8b:19:8a:ec:2a:a4:6a:55:d4:c4:07:09:41:05:8d:
4a:f6:ba:9e:f1:ac:27:02:31:36:57:5e:62:ff:32:e5:89:30:
80:0e:ed:11:1a:8a:69:92:66:e6:ce:56:1b:e8:87:31:de:a8:
e6:b2:5b:7d:82:f6:22:74:8d:d8:54:30:e4:e2:0a:7d:15:a8:
32:19:9e:43:42:44:3b:dd:52:dc:d5:73:68:74:af:4f:b4:3d:
e2:9b:51:0d:62:6f:cf:c7:5c:46:93:a7:90:88:61:8d:dc:b4:
9f:a5:32:3b:62:c7:29:45:4b:4d:9c:16:23:7a:b9:87:f8:b0:
49:85:15:23:2d:ee:44:e9:a1:4c:d3:4f:5d:36:f4:a9:15:69:
c5:96:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:57 2025 by rpki-client