Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer
File: xVV8l9e7_0fKIq1fufBYn6rxWb0.cer (raw, json)
Hash identifier: YeF3K/DEIAh+Mu5HJR8ccHxd4bAMQaZUNGyUHkXYwkA=
Subject key identifier: C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C99A50F45719E37B42680E8D32352
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213045
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:a5:0f:45:71:9e:37:b4:26:80:e8:d3:23:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5557c97d7bbff47ca22ad5fb9f0589faaf159bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:d1:e1:f8:04:cd:a8:51:06:f2:b5:44:7a:
e7:eb:02:b5:18:96:4f:6d:20:3f:15:95:e7:6a:83:
57:eb:9e:34:45:cb:ed:dc:62:7a:78:c9:f2:83:b9:
08:ea:ae:12:83:aa:e0:b0:66:76:f1:59:44:8d:9b:
65:82:0b:ee:74:5d:1f:0b:1a:fe:c1:cf:f3:6d:51:
f9:5b:89:3e:e4:68:8e:26:8b:a2:30:77:21:d4:0a:
e1:cf:0e:56:7f:4d:63:45:1a:d5:ea:4e:02:89:b5:
80:aa:2d:26:52:12:59:ff:c2:ea:1b:d7:c4:24:e1:
1b:ad:ec:9c:4b:68:13:53:1f:eb:b0:d9:11:19:45:
e4:6d:a8:ac:d6:58:82:bf:df:3c:29:c9:02:4b:e9:
e6:f7:c7:70:de:10:20:e9:ef:31:2f:92:db:af:54:
4d:24:73:3b:a7:0b:3c:42:de:10:12:a0:cc:ce:a9:
5b:38:09:85:b7:33:1e:e6:83:41:b8:0e:4f:52:08:
df:54:b4:2a:a2:94:cc:86:70:a5:5c:2f:87:31:ae:
a7:0d:f1:0e:30:46:66:8a:3a:4d:c2:f2:43:5a:4f:
bf:c4:33:6d:f0:97:68:58:ef:c3:d5:70:80:b7:3f:
c5:a0:96:46:72:b6:a1:a0:ea:56:24:47:90:6a:3f:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213045
Signature Algorithm: sha256WithRSAEncryption
2d:ec:67:1a:59:eb:28:28:78:0b:7b:ae:97:f7:77:12:1e:a6:
8b:b6:ee:8d:e1:38:93:f2:3a:ac:08:5d:e3:cd:1f:6c:5d:48:
0d:d5:70:d2:78:a2:93:82:f6:d2:6d:73:ed:5a:ee:02:ff:e8:
65:7a:c4:f4:85:b5:51:a4:2b:9b:af:cd:5b:90:94:da:1a:71:
db:bf:fe:0d:19:b3:4c:f0:ee:a9:7c:f7:34:18:70:d8:b1:7f:
b5:34:76:27:9a:ca:33:f3:a5:bd:dd:e1:f2:1d:17:18:d8:d5:
3d:21:39:ff:01:33:84:90:72:fb:81:d2:f2:34:5d:ca:7e:3f:
91:75:6e:93:6f:4e:c3:9b:1e:1e:b2:54:bf:89:a4:eb:12:d7:
15:e9:2d:4c:3c:6c:96:5f:b1:2e:45:20:da:49:8b:b7:24:65:
55:63:23:39:57:69:54:9a:56:81:24:84:75:0e:1a:35:c7:cb:
69:84:62:4d:42:13:1c:fb:22:b2:8e:7b:bf:49:a1:24:e5:77:
cd:a0:44:2b:1f:c6:34:97:d7:08:10:32:9d:7d:2c:c5:77:6a:
fe:2c:4c:b5:32:e0:da:c3:4e:73:8f:34:6c:17:07:d7:6c:c1:
0d:ff:cc:6e:35:df:90:0a:61:b0:25:2e:f3:94:02:33:5e:67:
8f:e8:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:28:34 2025 by rpki-client