Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer (raw, json)
Hash identifier: cs464AhmLLxhfGK+HBwdGFhkNUqtVeFOocoS31Y46ZU=
Subject key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA6B94E64765B4C6F82564A52AD761
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202941
AS: 214801
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6b:94:e6:47:65:b4:c6:f8:25:64:a5:2a:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:d7:27:c1:c1:6c:16:c4:6c:18:31:0f:c3:
f5:f9:3b:19:b6:ef:89:0d:7f:ea:4b:bb:1c:dc:94:
83:0d:c1:21:64:34:ab:51:8f:cb:a5:32:4b:40:5d:
af:80:fb:a8:6f:bf:d8:00:7c:19:77:a3:6f:aa:99:
70:b9:e5:c1:3a:e1:ee:26:29:4c:94:48:77:e5:7d:
e7:78:fe:64:dc:1b:c8:e1:50:c9:2a:d5:45:b4:0b:
6f:d8:bc:b6:52:75:27:c0:15:9d:f8:b4:e4:b3:9f:
f2:09:be:58:97:9d:a6:dd:fc:2b:e7:35:03:13:5c:
c2:1f:2f:97:ed:b8:ad:07:f6:d0:b1:f6:d6:09:63:
6d:86:26:e1:61:1f:4a:69:dc:b9:e8:fe:5e:43:1a:
a3:f4:59:45:2c:b5:29:92:44:7c:8c:6a:af:31:cd:
b4:23:7b:85:b1:47:6b:22:da:9b:02:08:50:e9:fa:
5e:8d:3a:84:24:f3:24:c7:42:b6:d8:8f:54:4e:66:
3c:64:f7:63:7b:22:23:2f:cc:2b:b5:3b:28:95:23:
9a:32:2b:13:50:22:1d:ba:b7:af:21:7a:d6:be:59:
fc:07:c6:cb:7f:4e:88:e5:c9:db:ef:b1:26:3a:7e:
08:d5:1e:e6:b6:5a:80:dc:f1:ff:ae:b3:98:6b:4f:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202941
214801
Signature Algorithm: sha256WithRSAEncryption
5c:42:0e:f8:f8:a7:37:e9:f2:bc:26:ef:60:26:27:fd:80:fb:
df:4b:86:74:26:01:aa:4b:35:02:d6:f6:6b:03:4a:18:ca:a4:
70:52:9a:6c:4b:aa:f1:60:37:74:a8:96:44:a0:2f:12:db:60:
31:2e:2c:25:9a:89:a2:12:a2:5e:ee:58:68:22:87:56:a9:82:
23:8b:17:ef:53:f2:45:19:ee:65:b7:3b:4b:6f:60:49:41:ef:
f4:f6:ba:3d:5a:f6:b2:1d:b4:e3:ef:a3:97:95:82:46:92:09:
78:48:eb:a9:7e:0a:83:a4:bd:46:41:86:c5:40:3b:5f:ae:04:
1d:4e:70:c1:5e:63:f3:8b:ad:eb:a8:e7:b1:63:0d:d0:57:2e:
43:68:c5:c3:64:9a:de:aa:22:b4:14:6c:5e:bb:8c:be:b2:ee:
b7:9a:23:2f:42:d2:96:8a:8d:02:30:5d:e1:84:c2:96:00:48:
24:55:2c:eb:0c:47:25:ec:fa:ac:41:87:46:1b:be:99:52:2d:
a3:a9:ec:1d:10:72:18:b4:76:9e:3a:e2:c4:be:32:53:ba:99:
3d:3e:36:c3:2d:c7:31:aa:de:03:60:55:51:88:23:b0:97:41:
62:e7:a9:b1:0a:9a:dd:98:b4:e9:03:45:21:76:e1:8b:73:aa:
8f:de:a3:86
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQf+muU5kdltMb4JWSlKtdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWM1YzdhYjViNzIxODFlNGU0MjExMzIyMjE1ZTk3NzZiNDkwMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0azXJ8HBbBbEbBgxD8P1+TsZtu+J
DX/qS7sc3JSDDcEhZDSrUY/LpTJLQF2vgPuob7/YAHwZd6NvqplwueXBOuHuJilM
lEh35X3neP5k3BvI4VDJKtVFtAtv2Ly2UnUnwBWd+LTks5/yCb5Yl52m3fwr5zUD
E1zCHy+X7bitB/bQsfbWCWNthibhYR9Kady56P5eQxqj9FlFLLUpkkR8jGqvMc20
I3uFsUdrItqbAghQ6fpejTqEJPMkx0K22I9UTmY8ZPdjeyIjL8wrtTsolSOaMisT
UCIdurevIXrWvln8B8bLf06I5cnb77EmOn4I1R7mtlqA3PH/rrOYa0//eQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFK7Fx6tbchgeTkIRMiIV6XdrSQD5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0Lzk4ODE4
ZC1mOGIzLTQ2NDUtODZhOC0zMDJkOTIyMjRjYjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvOTg4MThk
LWY4YjMtNDY0NS04NmE4LTMwMmQ5MjIyNGNiMi8xL3JzWEhxMXR5R0I1T1FoRXlJ
aFhwZDJ0SkFQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMYvQIDA0cRMA0GCSqGSIb3DQEBCwUAA4IBAQBcQg74
+Kc36fK8Ju9gJif9gPvfS4Z0JgGqSzUC1vZrA0oYyqRwUppsS6rxYDd0qJZEoC8S
22AxLiwlmomiEqJe7lhoIodWqYIjixfvU/JFGe5ltztLb2BJQe/09ro9WvayHbTj
76OXlYJGkgl4SOupfgqDpL1GQYbFQDtfrgQdTnDBXmPzi63rqOexYw3QVy5DaMXD
ZJreqiK0FGxeu4y+su63miMvQtKWio0CMF3hhMKWAEgkVSzrDEcl7PqsQYdGG76Z
Ui2jqewdEHIYtHaeOuLEvjJTupk9PjbDLccxqt4DYFVRiCOwl0Fi56mxCprdmLTp
A0UhduGLc6qP3qOG
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:31 2025 by rpki-client