Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
File: xsfkNpOlMtPW70EYbXDXpsVfut4.cer (raw, json)
Hash identifier: VrykqSwE4zpwncjd+jP1kvDLOb7zpWfXVPJxniY4l2s=
Subject key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB2C82A7498F1FA4BA93398ACF50FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211646
IP: 2001:678:f04::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:2c:82:a7:49:8f:1f:a4:ba:93:39:8a:cf:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:68:8e:ad:fc:08:e3:14:90:50:86:66:f5:
06:07:9c:91:26:70:2c:e7:27:24:94:4b:a2:34:08:
a5:d9:90:13:90:03:d3:09:86:0b:91:8f:c2:79:ce:
06:ad:18:14:c4:e1:22:7a:00:85:3d:5d:bf:43:b7:
d9:1f:40:b4:94:e2:b0:5e:92:81:4f:ff:c0:14:60:
23:d1:10:26:6c:f0:99:43:fe:7e:6b:3d:7c:8b:f1:
cc:06:2d:4a:13:64:5e:0f:8c:1e:be:81:a0:29:8d:
86:7b:6f:12:b5:da:80:23:31:89:36:c5:35:c6:fa:
9f:e2:c8:c1:39:54:0d:6e:46:85:74:fb:f7:44:71:
07:73:2e:86:dd:10:8a:25:8f:ab:7f:c8:ee:01:5e:
f7:cf:87:48:71:ba:2f:b6:60:60:ce:ee:5c:a7:42:
0f:3b:73:65:f5:54:a7:89:1e:e9:e2:83:b3:cc:e4:
6d:44:f1:6d:e6:90:a4:c1:e0:a7:e9:07:c9:34:87:
71:a8:b2:10:f8:bd:e3:37:54:99:49:82:f0:12:f3:
7c:16:91:a7:e2:df:6f:56:aa:8f:79:a8:99:39:a5:
51:49:54:7c:c0:98:db:b3:00:e1:3d:34:3f:a0:a5:
26:38:3d:6f:24:5d:a0:20:11:91:ad:3f:bc:3f:1c:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f04::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211646
Signature Algorithm: sha256WithRSAEncryption
17:5c:3d:ee:3d:d9:ae:bb:c2:6a:c1:75:89:0c:f1:dd:ed:21:
3a:05:f1:0c:02:c1:76:6c:50:2b:28:87:50:a6:19:3c:90:7c:
02:ff:53:32:45:83:ad:56:93:f8:62:ae:15:6d:13:24:14:a5:
19:81:c8:f2:d1:e3:c5:29:a1:9c:f1:a9:8f:71:45:73:44:88:
61:c9:4b:13:e2:83:2b:84:85:fe:23:13:61:88:2d:13:27:c9:
05:64:00:03:5b:1e:42:36:38:7d:b7:f0:07:6c:5a:42:ac:d5:
ce:79:79:64:e7:42:1b:f7:fb:66:41:75:a5:aa:3f:ad:0d:61:
79:21:15:f6:87:d8:31:a9:c1:eb:93:f2:a7:b6:5a:81:a6:d1:
74:e9:79:1f:55:92:54:15:aa:de:62:01:92:72:55:59:2e:cd:
65:10:4c:8d:0c:05:7c:88:10:20:76:a3:2f:02:14:52:ed:99:
8e:8f:49:56:a6:45:f4:44:0f:79:5a:ff:c7:44:47:ea:27:f6:
19:c9:8d:ff:42:87:c0:9b:cd:cc:b2:4c:b2:c3:08:f7:21:40:
27:00:11:99:d3:14:b3:dd:b0:c7:1e:c9:33:25:a5:a2:ca:13:
54:bd:43:9d:3e:5d:37:3e:e9:ac:8f:15:e6:14:06:7a:be:b1:
48:f4:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:29 2025 by rpki-client