Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer (raw, json)
Hash identifier: k+mzez0rKMKutM2YCjTEVrMHPxcPb399UXFYE32FUKw=
Subject key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B372458B7CAB6E635891A35E74C23A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204210
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:45:8b:7c:ab:6e:63:58:91:a3:5e:74:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:bf:d3:c9:05:19:37:a0:4b:f5:df:0f:64:
98:a1:52:75:14:82:29:23:9e:b7:a5:73:28:e7:d7:
34:67:08:9a:1c:a7:fc:14:5d:1c:50:87:15:d6:6d:
00:ea:71:62:b7:5f:55:33:70:a3:ef:e5:b1:4e:0c:
0a:80:e1:c4:cd:69:4e:18:e1:53:78:b0:46:76:68:
3b:f7:e0:9e:32:29:21:d5:a7:7e:f0:8f:ae:ae:c2:
ce:60:46:d9:af:00:12:a5:af:da:90:fb:28:c3:cf:
24:b6:c8:c9:ef:1e:33:27:d6:87:dc:d6:7f:70:d7:
98:0a:36:75:d0:0b:df:1b:ee:ff:47:60:f0:4e:9d:
38:60:a4:2e:cf:28:20:4e:af:b7:a8:68:8c:4a:47:
98:eb:f6:f5:4a:cb:19:d2:23:4f:6a:87:69:27:cc:
8c:f7:fb:9b:2e:bc:b3:e3:2a:af:9d:e7:4e:61:f6:
2e:d8:1c:08:79:b2:67:72:5a:1d:86:3b:34:6b:df:
e7:b1:6b:19:f0:98:81:3c:af:e9:c0:f4:e1:78:7f:
e5:96:c2:16:f5:4f:59:18:f5:ba:0d:0b:8d:e6:50:
bd:a8:cd:51:83:48:5d:f1:97:c9:cd:9f:3d:48:43:
47:b6:97:9c:87:55:ce:80:eb:33:b6:b4:75:2e:9d:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204210
Signature Algorithm: sha256WithRSAEncryption
a7:e7:73:9c:fc:d2:b0:72:0d:39:e5:b2:36:c0:1d:ef:a1:30:
4a:ce:cd:70:dc:fb:96:c6:28:8b:58:f6:26:60:a3:2d:83:f4:
67:72:ca:47:6c:c7:a8:60:79:1c:2e:6f:ee:e6:9e:0c:cf:f2:
69:00:5c:3a:bd:80:89:c3:b4:18:38:4f:31:4e:11:50:5d:e7:
00:07:6b:43:09:c7:86:c1:ac:66:5a:05:24:21:75:8c:15:a9:
6d:7c:fa:ba:76:67:0b:d0:af:5e:0d:33:d9:cb:61:6a:6f:d1:
fc:18:fb:2f:de:6b:eb:b3:ae:25:65:0c:74:36:28:a5:f4:e9:
57:56:e2:57:99:cd:03:71:9d:ef:7b:87:bf:ea:02:af:a8:12:
0e:e3:f3:21:06:1f:1c:e2:15:6e:7d:8e:d7:f7:a7:2b:3c:14:
b2:64:42:b4:c7:f0:c7:23:d7:49:10:05:30:a5:9e:79:3e:49:
da:0a:cd:a5:02:ff:85:1a:69:89:18:f8:11:0f:d7:03:40:c0:
04:52:71:ef:23:59:ec:85:97:56:6f:3b:15:a7:44:a5:72:66:
3c:87:2f:01:68:9b:27:c7:9d:39:30:71:6a:ce:be:6e:65:76:
fc:e8:4d:34:6b:57:bc:c9:f1:23:97:ca:74:22:ca:7f:6a:48:
32:e8:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:18 2025 by rpki-client