Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer
File: vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer (raw, json)
Hash identifier: ETOA1dkygO3z9WuUheQ8PP19vi0Vp33aWqQ7qXsvSUY=
Subject key identifier: BE:EB:4B:59:5E:9E:08:46:49:D0:AB:E5:B7:7B:8D:FF:73:6D:03:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21E2E845EAA0EF18BF650A5FED8A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/BEEB4B595E9E084649D0ABE5B77B8DFF736D03F3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216089
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1e:2e:84:5e:aa:0e:f1:8b:f6:50:a5:fe:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beeb4b595e9e084649d0abe5b77b8dff736d03f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:10:1c:0b:a5:a7:39:7a:12:40:d0:6c:fc:
29:08:f6:4c:d1:9f:35:e7:67:65:f8:3d:54:dc:1e:
d3:42:6f:73:69:8a:48:4c:cc:9a:28:5e:45:42:f4:
b6:f6:5c:fc:dc:b0:5f:12:76:99:37:36:82:16:d8:
d0:5d:11:e6:66:23:78:0b:41:56:61:0d:81:5d:96:
c9:f3:35:59:db:6c:36:ed:87:30:24:0c:11:bd:d4:
88:9d:7e:09:50:a0:ba:4b:09:8c:dd:c5:b1:51:4e:
67:5c:77:95:f5:23:91:a7:6c:cb:11:7e:63:ff:19:
42:b1:18:b9:73:f3:bf:77:b2:09:9c:dd:44:d8:7a:
5e:45:bd:ef:79:bd:42:e3:4c:d4:86:09:eb:c1:bf:
cd:8f:99:48:e2:72:47:4d:4b:4b:27:3e:5a:59:26:
3f:16:24:f3:77:52:9c:e2:cc:c7:6b:3e:ea:e1:7d:
23:c6:46:c4:d8:60:2c:22:5a:f3:44:58:72:7c:91:
18:eb:aa:47:1f:21:5d:8e:d4:b8:01:55:88:f9:35:
63:65:7b:8f:e1:e8:95:fb:5b:21:0c:04:de:a7:16:
57:ba:36:44:93:b7:1a:fd:dc:fa:d0:4b:95:54:b4:
94:20:76:a1:4a:36:ae:cc:ad:68:8b:ef:d0:6b:6a:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:4B:59:5E:9E:08:46:49:D0:AB:E5:B7:7B:8D:FF:73:6D:03:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/BEEB4B595E9E084649D0ABE5B77B8DFF736D03F3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216089
Signature Algorithm: sha256WithRSAEncryption
2d:72:17:45:bb:d8:d1:5a:0b:03:36:eb:c9:e6:57:cb:48:eb:
06:96:67:c2:0e:60:65:65:e0:b7:08:83:72:be:64:06:53:0a:
6f:f8:ba:22:1c:ca:36:e1:d3:fc:d7:81:eb:3b:e5:65:3e:d9:
64:92:7e:58:03:8f:84:ee:a3:28:e4:a4:df:7a:cd:0d:b2:15:
b0:26:72:c7:9a:08:af:53:e1:41:25:4c:db:c4:df:da:dc:79:
3a:a7:c7:df:f3:06:3c:de:ae:90:d3:b6:c6:4f:22:0e:ca:73:
48:45:60:f3:d5:51:59:b1:50:b7:70:d3:5f:06:d5:bf:a6:64:
08:87:17:b1:4f:b5:eb:3e:9d:b0:1c:5f:72:18:56:92:88:76:
87:06:ac:79:2a:fd:d8:ae:ce:1a:87:86:aa:b1:83:ef:60:e9:
b3:c7:eb:31:a2:95:f2:fb:9a:5e:81:67:8b:b5:f2:8e:38:a4:
f6:b4:17:26:f1:79:01:9f:29:23:8f:d1:aa:8f:e1:df:b9:2a:
d0:89:6a:26:d8:11:79:64:70:2a:48:e3:08:09:37:6d:3e:6d:
68:18:09:94:84:5a:46:88:fb:d0:95:31:54:c8:c3:7a:7c:44:
c3:cd:d2:20:05:d7:42:71:8b:52:27:cf:0a:ad:6f:64:c7:e4:
fb:8f:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:28 2025 by rpki-client