Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer (raw, json)
Hash identifier: B7+pNLdbV0qAt7xFdVIDxB/BfjOm6H/vLZPRPOj+IRM=
Subject key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C49BB8364F126A227701CC361E1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42198
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c4:9b:b8:36:4f:12:6a:22:77:01:cc:36:1e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adec58a002495d03ad5d9d11dd1421f195128524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:98:43:bd:cd:40:36:5d:ef:18:41:7f:f6:
0d:40:40:b0:e5:7f:f0:f3:63:f9:a1:fc:9e:f2:20:
1f:50:ce:47:b0:da:24:11:6e:b5:d3:e3:62:08:71:
92:77:1f:7a:fa:b6:1c:ac:00:25:60:73:7e:27:ce:
e9:43:ae:e8:79:83:1f:3b:32:0d:10:0b:39:e8:19:
20:64:91:26:91:4b:a8:2f:e2:1c:3e:a5:cb:99:06:
f7:8b:0b:0e:cd:38:10:e5:b0:17:6a:b2:d6:fc:d2:
47:87:96:22:8d:ff:54:24:f0:ef:2b:8c:40:98:88:
0a:5c:b1:ae:22:b6:8d:98:70:b0:21:fb:fe:79:41:
d3:38:b6:8e:9a:81:64:ba:38:b5:20:b7:04:c4:9a:
99:09:6a:c7:fa:09:da:69:f3:a0:b5:5f:29:e7:9b:
33:a9:d5:a7:97:20:c1:a8:9e:4a:64:db:a0:8e:ef:
02:d1:8e:ed:99:a2:1b:e9:61:2c:6a:9a:27:34:1e:
80:c2:9c:c9:95:9d:b7:37:fd:93:80:8c:dd:ad:8d:
19:1e:89:76:75:c7:d1:a4:a5:78:9d:fe:44:23:77:
d6:2d:2b:87:de:04:08:6f:f9:4d:74:8a:46:1c:22:
e1:47:ec:d2:5f:f3:8e:52:81:f2:4d:05:33:16:cc:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42198
Signature Algorithm: sha256WithRSAEncryption
73:d4:93:eb:d0:9f:3b:51:ad:24:a5:a4:f8:b1:af:be:28:63:
ef:d7:b4:7c:c6:9d:d9:29:5a:51:48:0e:c2:9a:74:6b:d8:70:
51:43:ce:0f:f1:38:df:c4:90:31:f7:ad:9e:3b:34:91:c9:9b:
49:0c:6e:62:7e:1c:dc:4d:19:7c:61:6a:31:aa:41:e3:42:1a:
13:cb:5a:04:69:e5:a6:df:dd:07:97:61:37:2b:b3:b8:38:d7:
11:87:02:cf:f6:c9:b6:ad:51:8b:dd:40:70:3c:6b:3d:87:2d:
65:78:65:1a:11:4c:97:e3:a7:1c:f6:2d:22:83:54:47:fe:a1:
7d:90:33:5c:9c:24:34:8f:24:97:93:8e:4c:47:95:0f:1d:fa:
06:40:b6:2b:2a:6f:38:d4:21:42:31:60:ce:f8:f2:87:d7:38:
5b:ef:77:70:c0:36:a4:f4:14:c1:17:c6:31:35:5b:f3:c0:38:
3e:e9:ad:5a:79:9f:d1:4d:34:bb:83:83:86:c7:cd:3e:ef:c8:
4f:16:a0:32:f7:d2:6d:70:8f:d4:c7:ec:5d:96:74:2a:47:24:
61:a0:20:c8:35:39:6d:43:00:8d:4c:b3:f6:f0:ab:f6:13:16:
0b:ab:ba:a5:25:90:bf:34:12:e7:01:62:98:6f:ad:d3:50:f8:
75:89:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:16 2025 by rpki-client