Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
File: xqnvrGfjS7iro4n_jw16HFZUM_0.cer (raw, json)
Hash identifier: 3WHVKrOVZyb8EbrvH1a/tzKSPNyMsFvgjAkat85N2u8=
Subject key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FBCAE3C67F6E3442785E3CD705FFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206461
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bc:ae:3c:67:f6:e3:44:27:85:e3:cd:70:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:f0:6a:35:a2:5d:89:4b:44:95:ba:df:95:
59:a3:75:5f:e9:a8:8a:8d:18:aa:1c:64:02:cb:ce:
0c:90:1a:ef:12:f5:ea:5c:43:e1:3d:53:26:04:e0:
ee:2e:76:26:f3:5b:06:84:a0:59:9e:29:75:6c:57:
4e:89:01:51:88:76:88:21:4d:69:44:38:1c:7c:18:
cc:ea:f0:fe:98:f2:05:71:aa:49:a1:cc:1d:7e:d9:
e4:3f:8f:c6:c4:0f:54:3c:62:08:21:00:5e:df:8a:
35:bf:4b:98:37:87:0a:fd:8e:31:f5:63:4d:59:a1:
85:58:fc:c2:46:43:25:3a:19:18:29:f9:f8:69:59:
3a:9a:6b:78:3b:ce:6c:c2:21:a5:7d:90:f3:ca:86:
6b:9d:b5:1d:9c:cf:62:02:27:ce:d3:78:cf:b2:d7:
8b:7f:7b:cc:52:85:c5:f3:0d:0b:3d:64:61:8c:8d:
04:a1:9a:12:58:3a:44:3f:a5:35:a6:9a:71:f2:80:
3c:f2:61:36:fc:6b:62:52:68:07:0e:7e:6b:7b:4b:
d2:7d:b7:d6:96:15:a4:ae:46:17:45:6b:d4:98:db:
bc:43:5b:58:55:9c:e2:47:f1:70:c3:ec:d2:34:e0:
d0:78:4b:9c:b1:3a:fc:33:04:29:89:e4:eb:4d:60:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206461
Signature Algorithm: sha256WithRSAEncryption
4a:c8:69:03:90:12:2c:48:0f:7d:11:72:29:16:1e:2a:3b:c3:
a3:74:7d:87:f9:bc:7a:a1:0a:b8:5d:7d:51:c2:18:e3:37:d4:
db:a7:8b:ef:01:da:1b:53:33:11:0b:96:a8:b9:bb:8c:71:a3:
c0:f1:f3:ae:22:37:f1:33:28:f5:3c:04:53:d2:92:e5:df:fd:
c5:ce:3a:91:1f:41:fa:14:1f:0d:e6:ea:4b:16:ca:bd:1f:53:
2a:a7:37:b4:82:4e:2d:1b:36:e4:70:d2:5f:f0:5d:84:35:3b:
b0:3c:73:1f:3e:3a:23:16:24:e7:11:23:b7:c7:bc:ce:1c:63:
fa:25:62:e3:ac:8d:e1:59:57:a6:8f:92:3a:82:c2:03:3a:c7:
06:87:b1:02:42:f9:9e:e0:19:57:77:c8:52:68:7f:4e:9e:64:
a9:c7:c3:70:e8:f9:2f:e5:ea:45:b2:49:cf:c8:63:d2:20:d7:
b0:62:17:af:cd:c3:0a:e4:01:f2:5c:b9:9e:09:88:f7:e6:30:
f4:12:db:07:5e:4b:5e:37:5d:9c:aa:12:55:92:e4:3d:16:94:
19:41:8a:43:f5:64:4f:bb:ed:04:ad:fe:13:58:16:26:ed:f1:
ec:d1:bf:a1:59:f1:f1:26:bf:28:43:fb:08:37:a0:3e:1c:c7:
d1:69:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:42 2025 by rpki-client