Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer (raw, json)
Hash identifier: P0b2NivUKJsfS2Cec5zwi9F1bOD5ob/xSMIchgJHli4=
Subject key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963A0A9992071601A0E081CB9314E57E1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Apr 2025 15:21:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210386
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:0a:99:92:07:16:01:a0:e0:81:cb:93:14:e5:7e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 15:21:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:bf:37:90:de:66:a9:6a:0f:d5:b8:18:88:
e7:88:90:f7:5f:f5:46:90:68:48:d3:a0:57:dd:aa:
42:40:58:a9:3e:fc:a7:40:9a:db:7d:ba:b5:e6:f6:
0e:80:f9:43:e9:71:80:52:74:9d:7d:69:61:ad:1b:
0e:ee:1a:59:7d:07:4c:a5:55:13:5a:3f:ba:d4:e3:
e4:c5:59:f9:f7:75:8d:4b:94:db:28:2f:5d:c2:82:
35:15:5b:fa:59:8e:45:38:5e:46:d1:35:1b:c2:68:
bb:6a:33:3e:29:c3:2e:a6:bb:b3:b1:5f:c3:c4:33:
86:43:99:48:27:12:09:33:33:7a:84:d2:38:0d:b0:
f2:77:e7:5c:34:90:e8:cb:5f:e3:23:e0:2c:d1:32:
c9:19:33:77:7e:51:a1:3f:42:7f:2b:04:68:94:d7:
38:a9:d6:4f:83:b5:d0:12:c6:91:9a:31:2c:e0:cb:
6a:cf:f5:6f:19:f0:bc:36:8f:ca:7d:68:c4:88:87:
9a:35:73:60:ae:f7:e7:ed:4f:dd:e7:4c:3d:69:4d:
9f:5e:f6:c8:e9:58:4f:1e:4a:43:48:e2:34:c2:b7:
07:df:f8:8a:63:96:fe:cb:e7:e6:12:8b:c4:ad:58:
90:65:d6:32:4b:96:7a:45:00:b4:47:e3:08:e0:91:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210386
Signature Algorithm: sha256WithRSAEncryption
20:20:9c:ca:10:dc:6c:e7:a1:75:a2:09:f4:a5:df:ee:77:54:
ae:30:69:f5:ae:8c:ec:bc:54:a1:68:84:c8:40:7e:e0:02:b2:
67:db:10:af:6e:cc:95:38:7f:db:8e:e3:a3:b9:1c:39:d6:18:
47:23:0d:64:ea:16:87:8b:08:87:b2:ac:50:d9:25:1b:d7:86:
5a:8a:e9:0d:82:3a:b6:2c:ad:89:5e:08:75:10:84:fc:d7:41:
3b:c7:1e:b7:0a:24:e3:23:86:c0:44:91:4d:31:7a:d6:1c:9f:
4d:89:dc:e4:13:11:83:1b:4b:95:3a:87:d8:62:53:86:a6:9b:
2b:16:d2:47:8d:d4:64:99:61:b9:42:89:72:a2:e8:28:2e:0b:
71:12:cb:37:b8:c2:3c:0e:67:66:a6:88:61:0e:a5:b6:1c:16:
67:f5:ee:3c:82:f1:65:c6:7f:9b:93:94:ed:9c:51:37:40:8d:
07:f7:6d:2e:a5:27:44:27:34:67:a3:26:28:84:89:92:e1:09:
08:8e:b0:96:43:5b:45:2f:83:45:44:45:21:f1:12:c8:42:e4:
15:cf:97:6b:c2:b6:8e:fa:b6:63:ba:16:44:15:d6:76:34:b6:
4f:b1:fd:0d:5e:f9:57:0c:25:cf:20:18:03:a7:63:00:47:55:
50:ac:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:21 2025 by rpki-client