Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.cer (raw, json)
Hash identifier: boACSbtEvJTMvTagosjrnsFeUY0y2cPP+0w/uxBFsSA=
Subject key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B6846275F8F0B0DEA03D0BE973FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50855
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b6:84:62:75:f8:f0:b0:de:a0:3d:0b:e9:73:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:98:54:d5:4a:8b:98:c8:89:71:10:aa:b8:
dd:23:30:ea:1e:51:fd:44:ae:7b:8d:a1:60:56:57:
2a:f7:9c:76:df:30:fe:34:cc:04:e1:60:d9:67:e8:
a9:ca:09:0c:ea:6d:31:8f:c1:f6:30:47:1a:22:49:
18:cd:0c:06:d3:6f:f3:af:dc:31:8d:29:03:ca:9c:
7a:7a:6b:35:e9:e9:6e:3e:ef:33:18:36:c3:ac:e2:
42:65:f3:98:77:fb:27:8e:4f:53:2d:5e:ea:87:4b:
db:c3:09:8c:84:58:82:c2:3f:ce:84:67:8d:bd:c2:
82:13:5f:d4:61:e1:51:a0:e3:20:d2:e3:23:21:c2:
90:ed:1d:f6:73:1f:b9:a6:a4:fb:c2:f9:8b:50:83:
70:43:1e:f4:80:22:c1:cc:f0:76:58:55:34:46:34:
29:96:cb:c8:f6:65:6d:f9:71:a6:1d:ad:72:15:b4:
ca:f8:c5:d1:98:69:51:08:f5:06:ab:6c:bc:29:08:
16:9d:d8:b6:41:67:f3:7f:0b:2b:8a:71:4c:e8:3d:
1e:ed:6f:70:41:d0:1f:58:23:39:33:07:62:c6:db:
05:49:8c:ae:b6:96:a1:46:73:de:23:9c:32:39:3c:
53:01:5d:be:f9:66:c3:7d:f8:da:f7:e0:af:ef:fe:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50855
Signature Algorithm: sha256WithRSAEncryption
2c:d6:1b:65:7e:1e:d0:9c:f2:27:9d:7b:c3:58:94:43:63:83:
29:4f:a9:64:a8:af:8b:ac:7e:22:39:ca:c1:be:fd:c3:8e:25:
37:7e:b8:44:f2:95:69:ec:a2:e6:d3:6b:31:34:43:7e:e1:89:
34:d0:fb:d6:0f:3e:1a:58:9c:c5:1c:dc:35:dd:e6:69:d7:24:
bb:68:2a:b9:e3:b6:a6:77:b7:09:c1:ec:5e:08:cb:a3:af:22:
be:56:25:59:89:e4:74:16:8a:1d:b4:cf:f7:13:bf:9e:9e:09:
31:79:72:f1:26:fd:77:e4:d5:2e:1a:40:54:3f:34:16:c5:68:
36:b9:16:bd:26:85:fb:18:b6:f0:12:89:46:13:84:86:dc:b1:
e0:7a:0d:dc:e5:66:98:bd:f3:63:04:d2:4e:a1:d3:71:f6:a9:
0d:48:97:b4:ea:78:e3:4d:24:d2:ce:57:5e:11:bf:02:74:a5:
88:28:28:37:b8:41:a8:24:f1:5e:a6:a2:a6:86:4f:ff:8b:1b:
29:35:ba:5b:2b:d6:7f:1d:cc:3a:dc:da:f6:d8:2a:08:1e:89:
40:59:0d:92:64:c2:21:db:4f:91:bd:43:e8:3f:11:d5:d3:c6:
ce:cd:76:35:29:a1:71:12:ef:47:b3:4f:74:74:27:94:d2:18:
c7:23:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:03 2025 by rpki-client