Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wTrxHpJ4hwCpdVhwprLwY-a6j_M.cer
File: wTrxHpJ4hwCpdVhwprLwY-a6j_M.cer (raw, json)
Hash identifier: 02TxNwpT2aOsQdQx1jnIYyjtzJpjDn4EkFyTMMTzKXQ=
Subject key identifier: C1:3A:F1:1E:92:78:87:00:A9:75:58:70:A6:B2:F0:63:E6:BA:8F:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDDC7E25498EDAA2D13C2A8ADC42E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/972d54-ab76-40e2-b4c8-dcb315e31a44/1/wTrxHpJ4hwCpdVhwprLwY-a6j_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/972d54-ab76-40e2-b4c8-dcb315e31a44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216291
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:7e:25:49:8e:da:a2:d1:3c:2a:8a:dc:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13af11e92788700a9755870a6b2f063e6ba8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:c0:a7:48:dd:10:b1:a6:81:53:ee:df:91:
cc:37:b0:f9:d1:aa:68:97:5b:16:9f:7e:6b:7c:04:
a1:58:f3:7e:32:57:08:e5:67:03:78:e0:18:67:1f:
b9:2d:93:65:34:2e:3a:8f:6d:a6:ec:3b:f5:30:b4:
b6:1d:58:5a:ed:1d:c7:96:71:7f:94:6b:aa:b1:9c:
da:68:c7:b2:5d:22:85:42:8f:2f:97:6f:d5:6b:d5:
40:c6:8e:20:aa:30:68:f1:78:e7:01:40:24:1b:08:
f4:af:12:20:e4:5d:f0:5e:3c:38:36:e9:09:7f:bb:
8f:d6:07:f5:06:b4:61:7d:af:23:3d:73:c5:04:7c:
dd:19:0b:af:d9:43:34:f5:d6:1c:26:56:4e:4d:1c:
66:88:f1:45:88:60:6b:53:a7:8d:10:e4:b5:25:0b:
06:bf:7e:4c:84:d9:16:14:51:93:e1:3b:3a:76:1d:
ce:c7:97:bc:64:ae:dc:48:a4:41:c3:8b:57:b9:1f:
a8:35:f8:9b:3a:ee:03:2b:c5:86:29:b2:78:06:87:
4a:48:bd:ba:16:f9:4e:7d:06:c0:87:e3:6a:8d:96:
c6:0e:b2:55:09:17:32:13:de:0c:aa:ab:3b:19:52:
ba:3d:dc:9e:d3:36:8d:0e:d6:ce:2e:77:86:95:75:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3A:F1:1E:92:78:87:00:A9:75:58:70:A6:B2:F0:63:E6:BA:8F:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/972d54-ab76-40e2-b4c8-dcb315e31a44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/972d54-ab76-40e2-b4c8-dcb315e31a44/1/wTrxHpJ4hwCpdVhwprLwY-a6j_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216291
Signature Algorithm: sha256WithRSAEncryption
39:d5:30:35:81:c8:7f:c6:10:27:03:0c:85:4e:99:c5:89:e8:
4a:45:3b:a5:33:43:41:ab:9e:dc:aa:d3:81:d7:57:d5:ef:5c:
72:9f:7d:92:b0:b4:fa:bb:27:09:18:d1:ee:ac:45:40:6e:f7:
92:c7:51:61:3b:53:8b:51:bd:9a:7f:b6:20:f7:9c:96:25:13:
02:44:ca:03:a0:bb:56:89:6b:bb:dc:c0:57:aa:bc:9b:94:1e:
39:90:80:22:fc:29:0f:c5:8b:20:0e:23:a4:bc:61:b5:44:ab:
62:16:07:d8:92:67:86:ef:7e:da:ad:cf:cb:d2:bd:85:4f:17:
64:67:f8:f6:41:86:b6:90:ce:a9:f8:99:0f:3c:ed:06:3a:ea:
4d:e3:4a:28:98:83:41:14:48:5d:04:4a:73:aa:74:5c:60:c1:
a0:42:e0:26:a0:9a:c9:12:72:97:e4:f9:ff:6b:1e:fd:8e:43:
40:89:fd:13:68:69:f2:b6:8f:51:c7:7e:d9:7b:db:09:53:7d:
45:2a:f9:3a:3a:c5:e2:0b:54:32:57:19:fd:a9:d0:4c:3e:c2:
08:82:fa:86:2a:83:40:8a:5b:02:f7:a1:c7:f0:79:5d:6f:95:
67:a9:bd:46:6d:22:97:cd:33:e8:a4:8a:2f:88:28:e5:f9:dd:
5c:cf:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:13:42 2025 by rpki-client