Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer (raw, json)
Hash identifier: k/DEjGwSUw8JPRrbACJaCRQTGOIwsVAzcVHR6aOfgtk=
Subject key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948A27D93CF5597CC6FA2014F9728C7AC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jan 2025 18:37:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213549
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:27:d9:3c:f5:59:7c:c6:fa:20:14:f9:72:8c:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 21 18:37:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:86:df:c4:f3:e4:83:34:b4:38:fc:6a:89:
35:c5:81:bb:ad:45:0a:3a:f0:74:a8:31:2c:68:ac:
73:e1:91:e0:a3:71:19:1e:8f:78:5d:6d:eb:80:35:
b9:e3:15:6d:85:28:85:79:58:32:e4:78:61:0b:f3:
8e:4d:cc:5c:d6:9a:90:23:b4:ac:11:5d:78:da:14:
7c:c4:38:fa:41:8a:17:e7:fa:27:41:73:32:16:a4:
1b:62:cc:0c:d0:06:70:5a:c2:d6:db:ac:83:3a:ce:
88:dc:05:2f:18:c0:29:ad:47:1d:88:86:b4:88:8b:
82:11:bd:53:4c:76:86:6f:11:d8:de:9b:67:53:fd:
33:04:a7:af:f0:ad:e5:49:8c:ff:de:e7:eb:7e:34:
ba:84:10:e8:dd:96:e4:fb:50:4c:1c:26:65:eb:81:
80:46:3d:03:4b:fe:81:03:66:36:18:14:07:66:6d:
e7:9d:70:b0:1f:cf:86:e8:5b:34:aa:24:0f:91:c3:
1f:14:15:51:cb:67:3f:83:ac:72:8f:29:8d:cd:ca:
ce:25:00:23:10:12:6c:a3:73:e4:00:62:55:94:a7:
45:4c:b7:2b:cf:fc:95:6a:5c:c2:c1:85:7e:50:aa:
49:62:af:e7:ae:83:ee:df:6f:00:ee:af:42:37:4f:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213549
Signature Algorithm: sha256WithRSAEncryption
26:14:b7:dd:b4:c1:4f:74:59:4d:97:f6:59:88:13:37:be:02:
d7:c5:89:fa:b8:17:31:4d:f6:2b:06:dc:1a:12:ea:7d:5e:d9:
23:ce:d0:f8:5b:1a:21:ef:c8:b8:7b:d9:04:cb:9f:8c:95:9f:
11:71:85:86:26:4f:54:dc:03:77:a3:dc:de:5c:58:3c:a0:5a:
1d:61:77:f1:e9:7a:c1:3d:e8:b3:a0:8b:c5:14:f1:63:f7:de:
89:5f:2c:93:d8:78:b0:fa:e4:12:0f:21:6c:35:b6:f9:5b:4a:
0b:43:c3:e6:ee:2d:60:c4:f8:6b:72:40:d4:7d:c4:c2:bc:09:
1b:1d:5b:89:70:27:dc:43:1d:8b:f4:5f:66:7e:fa:b8:3e:4d:
ed:72:79:9b:a4:5e:96:db:f1:de:a2:88:f1:06:f5:ef:55:9e:
78:b1:ac:91:fc:e2:b4:e0:4d:5f:f5:9c:8b:4f:70:2f:6b:69:
b9:1e:51:1d:1b:d9:4c:f5:53:75:ea:68:25:ab:bf:c7:8e:13:
34:ef:34:b5:c5:72:81:ea:8a:e5:cd:d8:d2:9f:cc:29:58:ff:
44:18:ca:d3:68:96:55:da:52:a9:be:bf:f5:67:db:7c:08:de:
40:4e:4f:f2:f5:07:c5:21:a8:3e:2a:be:da:ac:20:be:64:06:
ae:bc:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:04 2025 by rpki-client