Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
File: syznolxromOxucmrdrjS3DoNaAY.cer (raw, json)
Hash identifier: +wRtZYI/N5WBiYBmlh9q3kfHTn5xqZ4BYuizIIVeeMk=
Subject key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F4305CC09BE16D6C4AEEFA731C060
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214999
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:05:cc:09:be:16:d6:c4:ae:ef:a7:31:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:a7:91:9b:4d:95:cb:f0:e6:a5:39:36:26:
3a:db:39:98:c0:ca:e0:bf:5c:4b:02:1a:cc:07:b0:
a1:5a:85:a3:32:39:ae:43:24:eb:80:2f:ee:26:b4:
92:81:6c:74:e6:e4:a1:7a:6a:a9:cf:d8:28:af:a6:
71:c2:5c:8f:5a:ec:f1:dc:69:d5:be:89:4f:b6:12:
e8:2f:2c:30:9f:6e:30:ab:0a:cb:e8:d9:01:b7:98:
27:66:ca:4a:50:5a:6f:23:a1:d3:46:ae:47:18:cb:
f7:af:bf:ac:59:9c:25:bd:d8:44:7a:31:d7:7c:dc:
d9:02:97:ba:71:1c:6e:c0:79:03:9b:c9:91:11:a1:
dc:41:3f:a0:8d:e4:ec:3c:37:1a:00:dc:7f:15:32:
f6:ec:9b:d3:a9:b2:01:83:e9:59:c0:a3:c2:6c:7c:
94:a8:f8:2b:8d:4f:e6:f9:0d:8c:2a:db:c5:2e:3d:
8f:a1:be:df:db:65:f1:93:8d:bf:78:64:2d:b5:8b:
0d:f6:7d:f4:61:91:33:dc:8a:d6:be:c0:f2:dd:cd:
ec:0d:a1:91:74:b7:ff:95:f2:f9:a5:dd:4a:fc:a9:
08:97:98:cd:07:e4:ec:cb:0b:c3:74:78:cb:f1:5a:
34:3d:db:e5:dc:9e:21:e8:c1:80:d0:cb:cb:b4:34:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214999
Signature Algorithm: sha256WithRSAEncryption
82:ed:40:90:b7:74:e4:7c:a6:9d:a1:d9:d9:d8:75:f4:05:ac:
38:fd:6e:75:75:aa:69:b4:c9:38:3a:a2:74:c7:18:d2:04:4a:
37:15:d1:9f:49:1b:5e:03:ee:4a:f4:4d:91:b0:1f:6d:de:9d:
88:d1:a4:8b:27:74:dd:d9:83:ac:4e:8d:47:a5:64:e4:19:79:
89:b5:ac:4f:0a:be:db:1a:50:37:20:76:48:ca:10:16:3d:c4:
16:47:e5:5a:d8:d9:56:e5:10:23:d7:43:6b:00:20:ee:35:2a:
99:33:85:b1:d9:05:a6:f4:05:e4:7e:4c:6a:bb:3e:91:b8:fc:
a0:ac:e9:5c:75:0e:75:27:c6:3b:e6:83:14:63:ce:12:d5:fa:
05:26:31:b6:fd:89:d0:1a:12:12:03:55:fe:3f:de:e0:02:d4:
c9:11:8b:6a:fc:c5:5b:4e:ce:4f:21:c3:2e:f2:e2:40:5f:3a:
8a:fe:6b:79:68:5a:b1:4e:2b:e4:5f:59:75:87:a3:67:3d:a3:
14:f6:44:7e:b6:47:67:df:5d:50:f5:22:06:51:05:96:b9:0d:
9b:c2:72:3f:5f:da:07:89:0b:44:e2:c9:97:4f:e3:01:23:5b:
23:49:2d:71:ea:80:8e:51:2a:e1:12:4c:38:e0:d3:b2:14:4a:
f0:f0:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:02 2025 by rpki-client