Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
File: soehvthfaZtS-gaqGeUc8liPFLk.cer (raw, json)
Hash identifier: Ebjij76VLRc6Ubu7tHtBO4nXOz/rRvV2IjKr/TjXJPQ=
Subject key identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D941729216119865AA1B377938D1AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209645
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:41:72:92:16:11:98:65:aa:1b:37:79:38:d1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:4f:fd:c4:d9:6b:27:53:9c:b4:85:be:04:
93:47:d6:25:eb:91:08:b7:ce:5a:8b:8e:b4:ba:74:
9f:ec:bf:86:d2:c7:9b:f1:5e:66:93:f1:9b:a1:b4:
5d:ac:df:77:db:00:a5:a0:14:d1:b5:92:79:39:5c:
24:15:5f:b2:01:52:f9:3e:f7:a1:58:8f:ad:c5:11:
a1:dc:8e:c7:99:48:cb:e0:dc:3a:28:db:4d:e1:85:
87:24:13:3f:41:81:9f:e0:bc:8a:36:5b:b2:1c:6b:
2a:41:10:33:cb:3e:50:de:9d:08:00:e7:53:ca:c8:
78:ae:98:89:04:43:e8:9c:bf:87:06:82:72:45:bc:
e5:fc:b4:f5:4d:19:58:5a:6c:80:4d:f3:b9:13:75:
9e:4c:a9:0b:b3:28:9c:53:70:ee:0b:d7:c9:60:29:
b6:ec:64:80:bb:36:34:2f:2c:f4:f0:46:a0:c8:b8:
3b:a7:30:7c:11:23:13:09:e0:87:57:67:0d:3b:01:
b4:50:09:95:a1:8e:df:d3:96:7e:a4:b8:3f:71:1b:
ec:23:b4:2d:68:17:e7:dd:9e:a8:6d:5c:67:27:8a:
cc:3e:ca:23:83:55:9a:fa:0b:90:e6:3e:01:cc:ec:
4c:18:3d:26:74:4c:aa:77:b5:ae:95:e8:11:6e:f1:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209645
Signature Algorithm: sha256WithRSAEncryption
28:9a:44:b0:78:e7:88:66:d3:df:52:b1:18:5b:57:75:06:2e:
56:2c:a0:5f:76:aa:45:e7:72:88:40:2b:11:a0:46:86:7c:fe:
43:d7:5e:02:fd:3b:f6:dd:e8:63:d8:89:03:a1:52:cc:ad:dd:
f6:81:52:28:f5:86:c8:2d:43:1a:d7:21:de:34:b5:9e:d8:25:
3a:08:3b:6e:a9:68:41:33:34:f1:5d:00:22:53:4f:41:e0:29:
81:e7:80:f1:99:f0:d0:0d:b4:45:2d:18:7d:45:0a:66:4a:b2:
3c:73:2f:53:b2:c3:ac:b4:b1:3c:65:7d:a4:d2:b7:89:f3:69:
0b:64:6a:2f:55:37:89:85:2f:e6:7b:f8:55:f7:b3:3d:75:26:
3a:e8:22:59:ac:12:2e:eb:13:a7:b1:b8:8f:47:57:d4:36:05:
90:d4:c4:38:67:be:78:bc:6c:32:92:35:6e:c2:6a:50:aa:9f:
70:f5:20:68:36:d8:b5:e1:71:ac:1e:84:07:a5:5d:e7:2c:09:
c3:8f:42:bd:5b:f9:ff:45:d6:92:63:d0:8d:38:09:2c:66:90:
0d:90:6b:5c:e0:92:f6:f8:bb:86:6d:53:9a:16:c6:31:4b:f1:
7a:04:a8:4a:a3:3e:06:10:e5:d7:e3:dd:b5:1f:f1:c3:28:11:
06:a2:b9:8f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2UFykhYRmGWqGzd5ONGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg3YTFiZWQ4NWY2OTliNTJmYTA2YWExOWU1MWNmMjU4OGYxNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApipP/cTZaydTnLSFvgSTR9Yl65EI
t85ai460unSf7L+G0seb8V5mk/GbobRdrN932wCloBTRtZJ5OVwkFV+yAVL5Pveh
WI+txRGh3I7HmUjL4Nw6KNtN4YWHJBM/QYGf4LyKNluyHGsqQRAzyz5Q3p0IAOdT
ysh4rpiJBEPonL+HBoJyRbzl/LT1TRlYWmyATfO5E3WeTKkLsyicU3DuC9fJYCm2
7GSAuzY0Lyz08EagyLg7pzB8ESMTCeCHV2cNOwG0UAmVoY7f05Z+pLg/cRvsI7Qt
aBfn3Z6obVxnJ4rMPsojg1Wa+guQ5j4BzOxMGD0mdEyqd7WulegRbvFKQQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLKHob7YX2mbUvoGqhnlHPJYjxS5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzBhMjc3
ZS0wNjU2LTRjZmUtYThhOC0wMmUzZDllMDJlZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMGEyNzdl
LTA2NTYtNGNmZS1hOGE4LTAyZTNkOWUwMmVlYy8xL3NvZWh2dGhmYVp0Uy1nYXFH
ZVVjOGxpUEZMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMy7TANBgkqhkiG9w0BAQsFAAOCAQEAKJpEsHjniGbT
31KxGFtXdQYuViygX3aqRedyiEArEaBGhnz+Q9deAv079t3oY9iJA6FSzK3d9oFS
KPWGyC1DGtch3jS1ntglOgg7bqloQTM08V0AIlNPQeApgeeA8Znw0A20RS0YfUUK
ZkqyPHMvU7LDrLSxPGV9pNK3ifNpC2RqL1U3iYUv5nv4VfezPXUmOugiWawSLusT
p7G4j0dX1DYFkNTEOGe+eLxsMpI1bsJqUKqfcPUgaDbYteFxrB6EB6Vd5ywJw49C
vVv5/0XWkmPQjTgJLGaQDZBrXOCS9vi7hm1TmhbGMUvxegSoSqM+BhDl1+PdtR/x
wygRBqK5jw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:58 2025 by rpki-client