Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s0CjI3bSG3QyCZU1brqFtAZT5nI.cer
File: s0CjI3bSG3QyCZU1brqFtAZT5nI.cer (raw, json)
Hash identifier: +ScRSijIA2tbd5SSeKliRvx+n5AKkzyxYaEDdsEnoUg=
Subject key identifier: B3:40:A3:23:76:D2:1B:74:32:09:95:35:6E:BA:85:B4:06:53:E6:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019483C0587CC8C02D1A2687D7DCE7894849
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 12:46:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214129
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:c0:58:7c:c8:c0:2d:1a:26:87:d7:dc:e7:89:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 12:46:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b340a32376d21b74320995356eba85b40653e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:4e:44:8a:b5:27:f0:a3:49:a6:71:f0:b2:
d8:75:6f:00:67:a2:5b:00:03:82:0a:f6:cc:f2:c8:
51:b7:e4:65:56:7e:12:de:f0:98:e4:bc:42:50:f5:
c3:df:03:92:42:cb:d1:32:b2:7b:49:cb:b2:42:e6:
73:00:76:b3:2b:5f:17:fa:62:d5:09:81:ec:f7:81:
7f:5d:91:87:b3:83:a2:b0:b4:cf:09:72:ad:21:df:
32:49:a6:38:43:eb:f6:2a:7e:9a:b2:81:8f:45:ad:
7a:05:27:30:22:74:16:d5:df:3d:35:c9:c4:ed:44:
77:d6:8d:1b:60:52:47:33:7f:09:83:e4:51:f1:77:
19:b7:01:37:cb:8a:a1:7c:2f:f9:6a:e5:23:1e:07:
8f:f9:e8:5b:7f:95:60:4f:8d:ee:fd:8b:32:9e:1d:
d5:af:9c:13:0e:0e:bf:a3:6f:12:f8:8c:dd:fd:e3:
48:3f:64:13:28:33:21:ba:4c:83:d0:f7:0a:26:37:
b8:a3:4c:e5:50:51:fe:fe:1b:75:c8:da:18:52:8b:
88:59:80:42:7d:71:53:17:71:9c:2a:e7:94:22:40:
81:c9:e2:e7:95:23:c3:de:97:79:87:01:14:4f:7e:
c4:cd:31:89:b1:d6:b0:a5:06:31:ca:cc:0f:90:df:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:A3:23:76:D2:1B:74:32:09:95:35:6E:BA:85:B4:06:53:E6:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214129
Signature Algorithm: sha256WithRSAEncryption
8a:28:b0:fa:4a:65:39:76:b4:8f:00:2c:a6:1a:11:f5:36:7e:
36:c8:3d:b1:dc:5a:c2:6d:11:35:eb:69:95:44:d8:88:69:8d:
44:44:b2:c5:74:95:e7:e7:73:9e:4a:91:f8:6b:a1:59:bc:8d:
11:fa:63:58:57:a7:a6:b6:b7:57:33:36:47:1b:ea:4c:8b:5b:
ba:cd:7a:f4:0a:7f:f4:c9:d7:ee:79:4a:32:85:46:18:50:a8:
58:9a:e2:cd:f6:7d:27:35:b5:ca:47:5d:36:41:81:c3:b8:72:
a6:d0:ef:06:e4:58:99:7f:71:0a:30:3e:a8:0f:48:5d:bb:ae:
7e:b2:80:91:16:79:90:27:98:ae:3d:85:a7:ae:9c:cb:82:78:
69:98:69:19:9e:4c:48:36:66:44:54:ea:90:22:45:c1:86:90:
80:b0:74:dc:e0:85:da:c8:70:44:c8:44:f2:a2:e5:5f:25:6a:
fb:c6:2d:82:16:82:f5:83:ed:63:51:f1:62:a3:64:48:4a:10:
77:a0:c2:f1:d8:cf:24:f1:a7:37:97:76:7d:65:bc:2b:b1:cf:
d0:37:fd:fa:41:bb:f7:7d:cf:e2:4f:c9:7c:0f:da:1f:9a:b2:
f0:42:ed:ae:cf:f2:a2:8a:ec:c5:22:6c:b4:7d:f2:54:df:1b:
13:45:86:20
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZSDwFh8yMAtGiaH19zniUhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTIwMTI0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzQwYTMyMzc2ZDIxYjc0MzIwOTk1MzU2ZWJhODViNDA2NTNlNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyNORIq1J/CjSaZx8LLYdW8AZ6Jb
AAOCCvbM8shRt+RlVn4S3vCY5LxCUPXD3wOSQsvRMrJ7ScuyQuZzAHazK18X+mLV
CYHs94F/XZGHs4OisLTPCXKtId8ySaY4Q+v2Kn6asoGPRa16BScwInQW1d89NcnE
7UR31o0bYFJHM38Jg+RR8XcZtwE3y4qhfC/5auUjHgeP+ehbf5VgT43u/Ysynh3V
r5wTDg6/o28S+Izd/eNIP2QTKDMhukyD0PcKJje4o0zlUFH+/ht1yNoYUouIWYBC
fXFTF3GcKueUIkCByeLnlSPD3pd5hwEUT37EzTGJsdawpQYxyswPkN/MfwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFLNAoyN20ht0MgmVNW66hbQGU+ZyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgxODhj
ZjlmLTBkZTktNDUxZi1iOTM1LWIzZmYxZDg3YTY2Ni8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODE4
OGNmOWYtMGRlOS00NTFmLWI5MzUtYjNmZjFkODdhNjY2LzEvQjM0MEEzMjM3NkQy
MUI3NDMyMDk5NTM1NkVCQTg1QjQwNjUzRTY3Mi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRHEw
DQYJKoZIhvcNAQELBQADggEBAIoosPpKZTl2tI8ALKYaEfU2fjbIPbHcWsJtETXr
aZVE2IhpjUREssV0lefnc55KkfhroVm8jRH6Y1hXp6a2t1czNkcb6kyLW7rNevQK
f/TJ1+55SjKFRhhQqFia4s32fSc1tcpHXTZBgcO4cqbQ7wbkWJl/cQowPqgPSF27
rn6ygJEWeZAnmK49haeunMuCeGmYaRmeTEg2ZkRU6pAiRcGGkICwdNzghdrIcETI
RPKi5V8lavvGLYIWgvWD7WNR8WKjZEhKEHegwvHYzyTxpzeXdn1lvCuxz9A3/fpB
u/d9z+JPyXwP2h+asvBC7a7P8qKK7MUibLR98lTfGxNFhiA=
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:07 2025 by rpki-client