Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
File: raavh7Q2lN05mUwOMhQwaHVRny4.cer (raw, json)
Hash identifier: nkCTUrw6IBYVNgVdGzn/HJYYNz7zuxLpX0NKwRSCJt4=
Subject key identifier: AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3BF94292136346686CC5936578ABF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202990
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bf:94:29:21:36:34:66:86:cc:59:36:57:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ada6af87b43694dd39994c0e3214306875519f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:e5:31:7f:42:94:d8:30:cd:de:6d:d9:ec:
7c:20:41:5d:9a:e3:78:9c:2a:50:e3:77:aa:c3:25:
58:31:99:52:21:d5:b0:07:0a:d6:ba:19:6b:80:82:
34:b7:49:8d:0d:7d:22:15:fb:85:d4:66:46:50:37:
b8:9b:41:d5:fe:53:9e:e8:1a:64:b4:af:5d:3c:6b:
c6:2a:3c:fc:3a:1c:44:6f:e6:4a:88:92:0d:21:f8:
18:07:5c:06:fa:c2:06:52:43:52:7b:86:5b:79:6a:
ee:70:51:13:89:2b:9d:1c:ba:99:6d:29:aa:8b:e3:
b1:3c:72:27:22:db:e4:dd:eb:97:8a:79:45:c1:b2:
6e:30:b4:03:1a:d4:82:55:69:2b:f8:f2:4e:2b:79:
e7:e4:9c:28:ed:b8:c2:3a:60:8c:84:5b:73:36:02:
93:bc:e8:0f:88:81:f9:8e:58:d7:9b:93:ea:77:d6:
c9:b9:98:c5:ae:99:b8:07:06:f0:1a:31:5b:32:13:
d7:21:bc:ad:00:77:be:f2:fe:ef:8f:53:db:ba:ab:
4b:df:1b:ed:1d:a9:a9:5f:a2:06:9b:26:68:9c:97:
1f:c0:70:a9:db:68:62:9d:79:a8:59:e8:cd:fb:8c:
8e:82:65:b0:05:04:d0:03:38:50:a0:8a:32:84:53:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202990
Signature Algorithm: sha256WithRSAEncryption
4a:e7:84:37:5c:78:e0:31:ae:92:e0:af:7b:ea:bb:58:c3:9a:
f7:69:78:f3:a0:22:a4:e5:75:3c:09:d1:11:7b:8c:1b:47:18:
64:08:e2:81:06:73:1a:26:cf:75:3f:d8:c3:22:1f:29:b4:3f:
47:f2:8a:01:5c:cf:18:88:76:36:cb:64:25:f6:12:7e:53:f5:
4f:5d:8f:42:85:74:27:fc:13:c8:96:38:35:89:ef:22:e5:13:
60:ec:27:0c:97:47:91:cd:15:4b:d5:85:18:5e:c1:7e:dd:f2:
10:33:19:7f:9f:ae:76:09:4a:4f:28:f4:2e:64:c2:d2:63:40:
71:1a:a7:bd:b6:aa:2e:48:3b:90:cb:11:a9:af:e7:d3:73:50:
8b:f8:6f:5c:73:54:7a:1f:88:e1:81:dc:ed:cb:7d:ed:cc:b7:
55:74:71:02:29:2b:6f:7e:5c:dd:17:f5:9e:88:46:09:c2:2d:
e5:6b:ce:b7:34:d3:9a:f8:49:f3:6b:a8:85:32:01:6e:77:61:
1b:1e:d0:eb:09:78:e9:0f:0e:89:a4:2f:2b:b2:37:cf:1b:d1:
26:1f:79:b2:06:8a:81:b6:c5:0c:72:76:a0:70:c9:76:38:01:
6d:a6:1d:e2:f0:65:6a:9d:04:32:1c:2a:fa:32:f4:d4:50:c8:
7f:77:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:29 2025 by rpki-client