Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
File: vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer (raw, json)
Hash identifier: +NuWln+ahbS3LYg7V43NHMMeNca2c9TEw5xwaWLAHJg=
Subject key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB3C87751D74D903673E101234C19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44509
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:c8:77:51:d7:4d:90:36:73:e1:01:23:4c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:ba:db:f4:b0:fc:be:2a:ac:e2:99:d2:6f:
02:d9:76:a7:ba:3f:a5:50:e6:b7:e9:f1:4e:20:cd:
5b:29:3a:d2:86:21:dd:cb:03:6b:ad:5b:19:1e:c7:
fe:2e:a5:ae:44:1c:7a:2b:9e:59:50:79:6c:3d:65:
f9:0c:ca:e3:25:a6:9c:32:20:1d:5f:9c:a1:d8:c6:
62:aa:6a:52:63:3c:cf:8e:a1:5a:ad:f8:4a:f4:44:
41:03:99:8b:89:73:5b:a9:91:a5:8a:6c:05:35:9f:
8b:73:53:97:40:c4:66:ef:61:5f:4c:b5:4c:30:b8:
ef:d5:50:fa:60:31:e8:37:89:a2:5d:b9:e6:6a:80:
ea:89:6e:c9:ed:00:ad:af:39:e8:64:55:dc:97:d1:
9a:7d:89:eb:4c:f0:a3:39:82:af:f3:b9:52:a8:f9:
cf:95:46:0e:c9:8e:d9:38:a6:f6:6d:04:8b:d5:04:
8a:1d:10:bd:8b:f0:d5:5c:6b:70:89:39:17:e3:04:
d7:d3:cc:12:58:b1:aa:8d:1b:78:8c:74:e0:29:21:
9c:7a:ed:e6:33:2c:4e:de:65:31:7a:45:0f:2e:da:
82:80:cd:20:d5:b6:e8:12:36:8e:aa:99:57:10:6f:
75:83:e8:e0:43:90:81:28:95:23:51:0d:b1:92:8b:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44509
Signature Algorithm: sha256WithRSAEncryption
62:00:c8:12:49:48:c2:b2:47:52:f5:12:42:7b:fa:ef:b2:d2:
e7:bf:97:3a:e8:28:20:6e:2c:87:f7:2e:14:3f:ce:fc:9f:e9:
e5:3c:1f:59:b3:9f:27:88:37:e9:43:50:62:1d:fa:0a:4e:29:
20:2e:0b:65:76:25:f6:6c:7a:e3:7f:82:99:91:9d:c2:4b:47:
c2:fd:26:4a:ee:61:29:89:f9:cf:ca:76:b2:ee:19:ac:22:12:
36:08:6a:0a:95:aa:ce:eb:7e:3a:81:b5:56:d1:81:97:17:d7:
85:99:bc:30:fb:b6:51:78:3b:f6:d7:69:28:0c:5e:fd:73:32:
c9:22:cd:83:1d:25:02:c5:3e:70:01:0b:0b:f7:c7:26:fe:51:
73:ee:43:f0:e0:80:46:07:4e:06:96:b4:96:9b:01:8d:f4:23:
c8:d1:bb:05:11:f6:b8:04:21:60:01:d3:67:07:45:6f:74:30:
08:a6:6c:c3:a5:0c:d3:39:ff:fb:3c:b9:09:a8:cd:e8:60:72:
e3:e0:51:b3:48:5e:b1:f8:5d:fc:81:50:4d:f3:20:02:76:ce:
8f:39:c9:ec:8f:e3:29:87:7f:b1:23:3f:04:a7:65:61:d7:20:
29:2e:3d:31:37:f0:e2:5d:b8:de:bd:21:0e:cc:f6:09:9b:74:
ef:ff:c0:c0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQf+rPId1HXTZA2c+EBI0wZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU0NTQwMjk2NDc2NjgxYzQwNDhjNmQ2NTBkMGJhYWE2Y2I5OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzC62/Sw/L4qrOKZ0m8C2Xanuj+l
UOa36fFOIM1bKTrShiHdywNrrVsZHsf+LqWuRBx6K55ZUHlsPWX5DMrjJaacMiAd
X5yh2MZiqmpSYzzPjqFarfhK9ERBA5mLiXNbqZGlimwFNZ+Lc1OXQMRm72FfTLVM
MLjv1VD6YDHoN4miXbnmaoDqiW7J7QCtrznoZFXcl9GafYnrTPCjOYKv87lSqPnP
lUYOyY7ZOKb2bQSL1QSKHRC9i/DVXGtwiTkX4wTX08wSWLGqjRt4jHTgKSGceu3m
MyxO3mUxekUPLtqCgM0g1bboEjaOqplXEG91g+jgQ5CBKJUjUQ2xkosPHwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFL7kVAKWR2aBxASMbWUNC6qmy5jnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzJmNjg5
YS0yOWNkLTQ3MDQtOTRjZS1kOTA1NThhZjJjMzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMmY2ODlh
LTI5Y2QtNDcwNC05NGNlLWQ5MDU1OGFmMmMzOS8xL3Z1UlVBcFpIWm9IRUJJeHRa
UTBMcXFiTG1PYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCt3TANBgkqhkiG9w0BAQsFAAOCAQEAYgDIEklIwrJH
UvUSQnv677LS57+XOugoIG4sh/cuFD/O/J/p5TwfWbOfJ4g36UNQYh36Ck4pIC4L
ZXYl9mx643+CmZGdwktHwv0mSu5hKYn5z8p2su4ZrCISNghqCpWqzut+OoG1VtGB
lxfXhZm8MPu2UXg79tdpKAxe/XMyySLNgx0lAsU+cAELC/fHJv5Rc+5D8OCARgdO
Bpa0lpsBjfQjyNG7BRH2uAQhYAHTZwdFb3QwCKZsw6UM0zn/+zy5CajN6GBy4+BR
s0hesfhd/IFQTfMgAnbOjznJ7I/jKYd/sSM/BKdlYdcgKS49MTfw4l243r0hDsz2
CZt07//AwA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:32 2025 by rpki-client