Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
File: sTFfExaKIog9oEuECAZgc7Hz8Nw.cer (raw, json)
Hash identifier: PMgcsjTX1ScS1OCsr0TnpcnrkkgfwuOHXQ+OCxrDw4w=
Subject key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422201F28F8EE583B4ED67CC996D1869F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209650
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:28:f8:ee:58:3b:4e:d6:7c:c9:96:d1:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1315f13168a22883da04b8408066073b1f3f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:a0:f6:09:35:e9:84:a8:41:ba:e0:ca:e3:
0e:57:33:00:83:73:fb:29:ed:73:43:bd:99:93:2e:
09:5a:ec:c6:cf:32:38:6d:9c:cf:0e:a9:8d:fa:4f:
d4:2a:74:0d:7e:1f:df:2d:eb:fb:fd:d5:76:08:eb:
68:80:63:cf:5a:90:bc:3d:1d:e1:c9:d4:ea:86:84:
13:05:46:3e:71:a4:bb:9a:5e:e0:87:af:5b:e8:55:
f4:e4:18:31:57:b0:cb:a8:66:30:bf:53:a0:6e:80:
0b:b5:36:58:bb:b2:77:57:e8:04:ed:d1:c4:9b:a4:
3d:0e:c1:c4:71:f1:51:a0:40:bc:ea:91:05:2e:65:
f2:ef:75:d9:8f:91:d9:c9:85:a9:c3:92:68:c4:26:
c2:c2:ba:3c:4a:ff:e9:fb:8e:b0:25:1b:6c:0c:ea:
0e:0b:38:c9:fe:5e:9f:3a:05:16:00:41:22:ed:01:
15:85:84:61:5f:e6:da:fd:0d:72:7d:62:ec:2e:bc:
63:45:3e:3f:cf:1c:6c:04:53:ec:ee:ef:3f:ed:c5:
73:9a:c7:f4:eb:e4:bb:ca:75:a7:9c:0e:22:08:c7:
2c:ce:08:21:50:5a:a2:48:5d:4a:d4:86:2f:aa:be:
64:32:c1:5f:25:a0:98:d4:b8:42:6a:fa:31:27:d4:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209650
Signature Algorithm: sha256WithRSAEncryption
26:01:d6:2b:59:da:6f:37:e7:8a:ad:7b:87:b3:78:3f:cd:b5:
42:34:4f:73:af:f1:f8:35:6f:93:98:08:72:69:b7:55:44:76:
6c:14:34:3a:e4:26:65:20:48:b2:1b:05:68:13:43:23:76:20:
6f:52:67:48:a8:0a:a4:dd:45:57:07:4d:93:52:95:6e:65:03:
8c:aa:c8:98:9a:ad:4b:ef:26:65:b5:79:ed:7b:4d:c9:9e:33:
e8:f1:a8:87:ff:f6:38:79:bb:60:04:01:25:17:4f:bc:26:f5:
96:7e:cc:2c:58:68:ca:e7:62:b7:5f:31:7c:a3:e5:ea:7d:61:
d7:f4:ad:67:da:c3:8f:e6:9c:c5:97:c3:8e:df:fd:4c:a8:75:
61:d3:04:0c:71:a6:95:52:24:60:b2:5d:16:43:91:67:fc:cc:
46:44:ac:5c:6d:69:f9:fc:f4:47:f4:48:0c:93:49:69:63:07:
ab:77:31:40:b1:64:8f:59:39:96:80:f1:76:a6:1c:4a:28:c6:
2f:db:8a:42:c3:00:48:3a:13:50:7c:28:e0:84:a0:ae:08:c8:
83:ad:d2:24:6c:d8:62:13:cf:32:b1:ff:0d:0c:bc:d0:98:5e:
d6:71:de:6b:b3:90:2c:d2:eb:ca:29:0d:67:60:ba:59:02:ac:
ae:75:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:52 2025 by rpki-client