Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
File: s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer (raw, json)
Hash identifier: EhdCsI5jnDy2cEIVNJfhdsg04XqudzcPNByTG3I76FM=
Subject key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1D088ED6D2754BD5865623FC47782
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215147
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d0:88:ed:6d:27:54:bd:58:65:62:3f:c4:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:1c:47:c4:04:a6:f3:2a:1b:a9:b3:6d:e7:
81:4d:4f:f0:6f:d2:44:26:f0:48:d7:78:3f:48:10:
3d:b7:a8:b4:11:fb:91:e0:a5:3a:92:f0:1e:63:aa:
66:ec:cb:06:de:50:96:26:88:f3:68:fd:65:c0:07:
a7:9e:5c:93:df:b3:71:99:ee:13:b9:ba:2e:6e:cc:
44:08:1f:b6:07:46:d9:8c:b0:8a:cf:b4:0e:8a:55:
27:80:03:ae:75:aa:2f:65:03:7a:c1:bf:9d:8e:31:
9b:4b:96:c5:9b:35:3d:86:33:f1:5b:bc:a8:b1:9c:
45:00:22:6f:de:c4:56:ec:07:8a:0d:1a:2e:0d:08:
5e:af:09:3f:01:1b:52:88:5b:94:ae:92:14:d5:00:
db:52:2a:10:b1:79:9d:ce:b5:26:3d:0b:be:d5:76:
93:50:9a:b2:f7:85:f4:89:b4:32:98:a4:ad:c4:26:
12:bb:e0:67:c5:58:f5:56:0c:3e:4b:13:29:e5:7d:
66:31:62:88:d0:69:93:6d:9f:41:96:16:57:7b:e6:
75:53:7b:9b:8b:23:a1:76:c9:68:24:a1:a7:5a:26:
a8:f9:c7:cc:de:65:1d:75:8a:3e:38:28:da:e8:87:
7d:6e:2a:73:6f:c0:e4:f9:90:87:a5:3d:77:a2:ba:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215147
Signature Algorithm: sha256WithRSAEncryption
8a:f9:6f:21:cd:6b:6e:14:ae:b1:a2:02:8b:b8:d4:df:13:fc:
96:11:16:61:6e:bd:40:e6:04:60:fd:38:1b:91:71:05:43:2e:
1a:50:32:08:25:d5:78:7d:bf:0d:86:4e:58:6d:95:b8:cb:5c:
85:35:aa:4b:04:14:7c:e1:2d:47:81:46:09:76:53:0c:6e:e0:
54:bf:bd:f6:33:cd:ea:20:0d:73:01:2b:3c:1e:86:c0:6b:91:
eb:19:04:bc:be:99:94:fd:59:cf:26:64:0e:8d:fe:54:b8:9c:
e6:d6:4e:74:40:45:46:46:61:2c:29:3b:3b:46:07:62:e4:a6:
3b:15:90:7d:40:e9:b2:29:69:06:27:7b:06:55:1a:17:fa:a1:
2f:7f:11:f7:f3:5d:45:95:91:6e:ef:c5:f2:95:d6:64:84:4f:
99:c7:47:ff:fc:3c:8e:87:f1:8d:29:1b:70:63:04:f3:7f:52:
82:dc:25:19:20:af:cc:79:52:3e:26:91:91:1f:fa:76:65:fa:
a3:c6:63:76:c3:54:bd:1b:72:a6:d7:67:ed:a8:3d:8a:74:a7:
bb:60:54:ea:86:34:8c:42:6e:e4:2b:a0:9a:c7:a4:87:b1:bd:
da:bd:f5:e1:b8:85:ed:b4:ee:0a:9f:e2:b6:a4:57:e1:b3:5c:
eb:8b:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:30:33 2025 by rpki-client