Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
File: rVYQTCidcf2Duoh774CRkU82biE.cer (raw, json)
Hash identifier: YlvQA7zGLIfOzDzlj5BWBFH/3ldIj+SOGWYAaKoQHWo=
Subject key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C6A009C595776158DA15BBD1BA189
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210851
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6a:00:9c:59:57:76:15:8d:a1:5b:bd:1b:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad56104c289d71fd83ba887bef8091914f366e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:23:85:9a:77:d6:6a:08:f8:0c:8e:96:6d:
8c:d7:55:f4:0b:ae:0f:6e:96:01:cb:89:d1:67:54:
59:70:1d:92:9b:3c:ec:19:b3:0c:b2:d4:60:9f:e4:
46:55:27:1a:7e:88:80:41:25:95:b4:40:f8:74:78:
43:be:8b:0c:f5:1b:f9:b7:74:4f:d1:76:ab:df:65:
f3:21:d3:31:91:0c:ad:e7:f9:8c:e8:cc:fe:46:d3:
ed:34:af:8c:68:8b:97:4e:54:54:0d:59:ed:64:21:
e3:8d:4b:a5:fb:02:c2:e4:c4:a2:c3:5c:9c:9e:49:
6f:6e:ec:72:8a:21:ac:c2:f9:98:c9:df:d8:22:bb:
57:ce:7d:56:5a:44:89:bc:f2:67:7b:7e:d1:4f:87:
ca:16:07:8a:d4:2c:61:7a:4a:0d:90:d1:01:e3:4d:
7d:9a:48:ac:c5:51:e7:35:c4:90:a9:0c:35:5f:6a:
af:1d:73:71:92:04:b0:94:72:62:de:89:3d:29:61:
ff:bc:08:33:e1:81:c2:7e:23:39:d1:78:5b:8a:fe:
80:52:4f:cb:c0:08:02:e6:78:5c:62:70:29:05:40:
5f:09:49:bf:ad:61:e8:72:e9:8d:ba:b6:84:9d:73:
28:a2:41:d3:ba:d2:e6:0f:30:c3:0b:49:8a:33:e7:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210851
Signature Algorithm: sha256WithRSAEncryption
8d:8e:c2:16:43:fa:99:d4:5d:e6:18:75:06:77:c3:4c:4f:c6:
20:c1:45:9b:76:fa:22:1b:f8:5e:95:fe:fa:9c:01:4a:74:ea:
e7:ea:ee:9e:46:b6:7f:1d:76:b7:c0:43:97:d0:b7:50:66:92:
e5:09:4c:ef:79:e9:cf:42:2d:d5:b2:c3:d9:60:b4:cb:3c:aa:
ba:51:f5:f2:28:d4:b1:af:b6:27:53:ad:e6:45:c4:ea:2d:2c:
0b:28:17:e5:86:43:eb:00:cd:4d:27:14:7e:26:f2:8b:bf:7a:
8f:f8:29:d4:b9:c7:08:d7:25:d6:e5:75:02:5a:72:79:fd:f3:
44:d0:4f:b9:0b:70:48:0d:f8:37:5f:b9:63:1c:85:f6:b7:d8:
b1:54:11:e7:6f:d5:5c:07:83:cb:d5:5c:df:f6:80:e5:57:80:
0e:08:f4:75:7f:ec:43:51:16:55:da:57:07:c6:54:d9:bb:95:
28:b9:48:2f:72:2a:2d:1a:1f:44:78:da:1b:97:59:2c:ba:15:
58:ae:ba:45:cd:c5:c3:56:c3:c2:42:00:5a:35:40:49:78:08:
aa:a3:bd:fa:35:5a:91:8b:2d:62:31:14:b3:04:e1:9c:a6:2f:
ff:31:11:fa:7f:68:55:c6:f4:33:51:b7:7d:64:16:16:bc:0f:
e8:c5:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:18 2025 by rpki-client