Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.cer (raw, json)
Hash identifier: uTk4MEMkjxUXTv3I+ktxOI58JnmivV1RvId7vKxH4to=
Subject key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195190470AA89C4BA2B212DD3CC67C3AAB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 12:24:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209176
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:04:70:aa:89:c4:ba:2b:21:2d:d3:cc:67:c3:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 12:24:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:60:65:54:f2:25:cb:0c:8c:1a:d4:f8:d8:
00:b7:9b:74:80:8e:b1:de:57:e4:fd:67:24:58:91:
ad:91:e1:38:c2:da:3f:fe:c8:ae:35:20:79:54:c6:
bb:6c:58:2c:26:42:85:d7:20:c6:d2:00:70:36:7a:
9a:e2:00:a1:2d:6c:1a:9d:44:3e:fb:ce:a3:b4:4e:
61:40:b3:12:e1:85:b6:1a:a0:e1:b3:39:a3:cb:6c:
a2:e5:b4:cc:20:ea:10:44:60:0c:7f:93:ed:14:46:
ea:ab:ec:f0:86:f8:00:b2:2c:db:18:34:93:97:b5:
a3:5b:d2:b0:65:72:ff:89:8b:87:fe:2d:d3:b1:31:
38:8f:3c:df:23:a6:17:65:32:fb:1a:f2:4d:b9:7a:
f8:4e:4f:f3:1a:b6:88:e6:84:bf:b2:a4:4b:0c:20:
ee:ff:c0:53:fa:83:9c:62:ef:02:7a:bb:9c:71:56:
1a:8b:f1:2d:09:01:03:b4:b3:c9:2f:39:d0:8a:70:
88:cd:2f:81:bf:ef:0d:a0:95:ef:d6:bf:ff:f8:b0:
5e:c8:d5:e4:4d:2a:dc:61:4a:85:16:e5:66:e1:f0:
39:6a:48:b4:49:1c:71:08:83:8f:3c:72:13:00:9f:
bd:9a:0f:f4:4e:75:fd:3e:39:60:5e:dc:9e:b1:b4:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209176
Signature Algorithm: sha256WithRSAEncryption
5c:a1:13:1f:59:b8:ee:59:69:3e:00:64:51:1b:bb:84:29:f8:
b8:cc:4d:f4:aa:bf:20:a0:8a:c7:f1:1c:fd:9e:a7:83:f5:fa:
b8:2a:ed:f0:4e:de:b1:e7:ec:4f:91:05:dd:49:e9:15:9c:6c:
6d:2d:56:ba:20:c2:23:d7:26:27:6e:fd:c4:04:ab:05:46:7f:
e6:0d:1f:66:dd:65:4a:ad:1c:f9:ba:c7:f8:ee:f8:44:6b:2b:
dc:5a:ad:87:2c:d4:da:d7:9d:40:6b:2d:3f:71:4e:52:1a:d4:
2e:58:80:8e:be:63:28:91:05:b4:53:5f:fe:ee:f5:fa:91:cf:
73:ab:f9:81:95:93:52:df:c8:f2:e6:f8:f9:dd:0b:b8:61:36:
43:e6:7f:9d:12:26:2a:76:76:42:d3:d4:ab:0f:66:e1:f3:35:
e4:67:70:42:0e:2a:64:b0:39:db:ee:17:ea:8e:4f:00:c8:d5:
03:e7:c5:27:c1:75:b5:e1:09:46:86:71:46:48:0c:20:60:9a:
22:83:95:d2:29:b5:60:ff:7f:23:56:67:bf:bd:97:6b:79:85:
05:c7:70:a6:44:83:79:15:5e:0c:6f:fd:1c:da:24:94:ea:c4:
ca:a3:bb:e2:87:58:ef:48:6f:d1:9a:28:6c:f6:3e:3d:8a:d2:
bf:3f:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:02:42 2025 by rpki-client