Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
File: sxwNSGRgtxY3A-X_TYre2XiIx00.cer (raw, json)
Hash identifier: Ps/F+igqBcpKaP9TcYfgDs+Sex4pa7Hn9zdqRy8JVWs=
Subject key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420685C284A99EA49C48336F0A50185B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57330
AS: 207780
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5c:28:4a:99:ea:49:c4:83:36:f0:a5:01:85:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:90:d7:36:29:18:c8:da:97:f8:0e:ae:aa:
68:4e:e1:a7:4c:02:2b:ca:e4:75:2c:ad:8a:55:cf:
d8:3a:13:2b:6d:5d:d7:93:54:8b:6f:b6:e1:80:9b:
f5:04:df:6c:f7:10:81:a6:e6:40:7f:2e:de:f2:4d:
31:1e:1e:c2:78:1b:96:1c:56:94:06:09:81:f7:dc:
15:92:45:24:71:1f:9d:9c:6e:36:3b:db:44:ff:b0:
77:26:40:68:43:e2:2a:b1:38:25:0d:3b:7c:94:09:
d1:ca:54:79:25:f3:eb:05:23:66:cd:46:2e:e9:c2:
c7:83:b2:62:c7:a8:1d:b6:3a:ac:af:2d:a6:4a:a7:
f6:00:c3:06:34:03:8f:a4:37:b1:b9:5c:8c:f0:d0:
17:5d:87:a8:b0:08:f4:3a:97:71:86:4c:dc:09:fb:
c1:9f:fb:85:1b:69:72:f8:7b:69:4c:c9:87:c2:cb:
b4:e1:b7:a3:95:db:85:6e:56:8b:48:a6:3a:f6:54:
ca:f3:56:d5:d2:39:f1:f3:23:67:15:7d:bc:e4:56:
41:01:d7:0e:12:22:78:78:0c:b8:ff:32:a7:81:07:
6a:2a:1b:76:2a:0b:1e:d9:0a:74:f7:c3:67:75:ca:
3b:f3:1a:f4:ec:01:31:c7:91:d3:e0:37:2a:31:8c:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57330
207780
Signature Algorithm: sha256WithRSAEncryption
52:69:d0:a4:94:e2:f9:de:3c:ff:0b:5b:2f:95:38:e7:cc:7c:
e8:55:c0:0c:69:12:8a:b8:0a:58:7c:8b:d9:39:d3:d4:15:17:
36:9f:3b:91:9a:20:38:49:71:1c:cb:64:43:79:e4:a9:61:80:
9f:23:5e:3e:47:cb:62:bf:d0:d0:10:6f:7b:35:88:6d:dd:0e:
0d:51:01:a4:93:95:21:e4:41:aa:9f:de:00:0b:99:9b:4c:39:
09:3b:5e:97:c7:29:05:c3:33:77:32:b0:19:ee:21:5b:a0:57:
a0:72:b7:f6:de:d4:39:1d:22:9f:34:1d:aa:db:ad:82:21:71:
29:34:af:9c:7a:eb:f7:c6:87:3e:9d:37:45:c8:c4:f4:54:58:
13:b2:dd:a9:81:c4:e4:6b:12:5b:9a:7f:2b:4d:bf:2c:bf:75:
8a:a6:e8:55:64:8a:db:2c:25:3f:cd:0c:ea:03:6e:d4:f6:1d:
3b:09:53:ba:4e:c5:68:f3:89:23:2b:b7:bd:dd:e5:50:c4:97:
6d:af:27:48:7a:2e:d5:df:a9:77:d1:46:04:d7:6a:18:82:e1:
0d:ef:8f:34:b6:27:e2:fc:3f:e1:a7:22:02:7b:fa:45:df:e9:
3c:3a:21:c0:0d:ff:98:cc:89:3f:56:f7:bd:3f:91:d5:71:11:
7e:25:ee:3d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgaFwoSpnqScSDNvClAYW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzFjMGQ0ODY0NjBiNzE2MzcwM2U1ZmY0ZDhhZGVkOTc4ODhjNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6Q1zYpGMjal/gOrqpoTuGnTAIr
yuR1LK2KVc/YOhMrbV3Xk1SLb7bhgJv1BN9s9xCBpuZAfy7e8k0xHh7CeBuWHFaU
BgmB99wVkkUkcR+dnG42O9tE/7B3JkBoQ+IqsTglDTt8lAnRylR5JfPrBSNmzUYu
6cLHg7Jix6gdtjqsry2mSqf2AMMGNAOPpDexuVyM8NAXXYeosAj0OpdxhkzcCfvB
n/uFG2ly+HtpTMmHwsu04bejlduFblaLSKY69lTK81bV0jnx8yNnFX285FZBAdcO
EiJ4eAy4/zKngQdqKht2Kgse2Qp098Nndco78xr07AExx5HT4DcqMYxvIQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLMcDUhkYLcWNwPl/02K3tl4iMdNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI5NDQx
Yy0yODFjLTRlMDItOWE5MS04MjQzYjdkYjEwNWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjk0NDFj
LTI4MWMtNGUwMi05YTkxLTgyNDNiN2RiMTA1ZS8xL3N4d05TR1JndHhZM0EtWF9U
WXJlMlhpSXgwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDf8gIDAyukMA0GCSqGSIb3DQEBCwUAA4IBAQBSadCk
lOL53jz/C1svlTjnzHzoVcAMaRKKuApYfIvZOdPUFRc2nzuRmiA4SXEcy2RDeeSp
YYCfI14+R8tiv9DQEG97NYht3Q4NUQGkk5Uh5EGqn94AC5mbTDkJO16XxykFwzN3
MrAZ7iFboFegcrf23tQ5HSKfNB2q262CIXEpNK+ceuv3xoc+nTdFyMT0VFgTst2p
gcTkaxJbmn8rTb8sv3WKpuhVZIrbLCU/zQzqA27U9h07CVO6TsVo84kjK7e93eVQ
xJdtrydIei7V36l30UYE12oYguEN7480tifi/D/hpyICe/pF3+k8OiHADf+YzIk/
Vve9P5HVcRF+Je49
-----END CERTIFICATE-----
Generated at Sat Mar 8 22:13:45 2025 by rpki-client