Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
File: ayuSHZprREq1jmbriPfBI5jqBLU.cer (raw, json)
Hash identifier: yZ+yPacUC1UyhHYA8omQL7utgoLEDz0W5TFstPnAzTg=
Subject key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019642CA937598D831432BB63F33EF01F157
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Apr 2025 08:08:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50273
IP: 2001:67c:dc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:ca:93:75:98:d8:31:43:2b:b6:3f:33:ef:01:f1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 08:08:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:2d:45:81:a5:e3:4a:d5:90:30:8b:2a:86:
61:92:a4:67:97:d1:ff:f9:04:9b:ca:e8:2b:1e:45:
25:f9:d1:9a:42:e3:d7:df:c9:34:3f:04:c1:db:34:
dc:11:bd:cf:49:af:8b:49:91:61:7e:f7:99:79:13:
81:f0:ed:37:82:36:9f:c0:56:87:86:ca:3b:00:a7:
db:ad:2c:cd:2b:a1:c3:83:21:31:6c:9f:08:cd:ef:
64:a8:d2:20:5b:d1:92:04:bb:6c:70:2f:6b:60:da:
55:5b:0b:91:eb:d4:45:d4:28:d3:53:1a:0e:22:b0:
1b:b3:3c:23:83:3b:ab:ed:b3:4f:0f:ad:7e:a2:03:
db:2e:28:ec:d4:98:74:42:8c:0c:94:10:d5:97:82:
53:96:db:7f:33:00:d0:dd:98:14:59:af:43:c9:21:
18:cc:96:51:9b:a2:7a:b7:45:d7:c8:6f:94:7b:43:
a0:be:1e:90:a4:6d:d3:b1:ae:89:df:df:54:09:35:
b1:2f:43:bb:8e:f8:5f:dc:ac:10:2e:93:61:3c:94:
74:58:82:af:04:2d:43:2c:99:10:a2:33:29:f8:e3:
8b:11:0d:c8:60:3b:d3:ab:eb:d1:c1:f0:1b:35:fe:
a6:c4:3f:11:a2:03:2c:cc:24:2b:c7:89:73:9a:e4:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50273
Signature Algorithm: sha256WithRSAEncryption
a2:2e:51:4d:5a:6f:1b:9d:07:c2:4d:95:9d:68:27:cd:59:40:
e0:4a:30:3b:66:fe:d4:1a:78:33:52:b2:ab:44:00:22:d6:47:
3c:b3:59:be:75:59:86:44:20:d7:7b:6a:20:d3:1b:cb:0a:d7:
d8:2b:d6:92:ef:57:7c:cd:b4:90:8c:5f:63:01:cf:11:f4:04:
7b:3e:52:04:8f:1d:cd:cc:1e:45:6c:93:ce:b2:24:9d:19:16:
46:92:2b:77:13:e1:fe:bb:87:e1:a6:b4:31:f1:78:dd:72:da:
b4:7d:c8:42:df:46:10:b7:14:08:a0:6a:62:42:ce:14:bd:94:
01:8f:24:3e:4d:a6:a7:c1:2f:4f:a2:9d:23:d4:3b:65:54:e7:
f4:3a:83:99:d9:03:e3:a7:a7:b2:2e:f7:2c:e3:bd:8d:88:cd:
19:2a:3c:09:7e:77:cf:be:c9:2a:dc:14:30:27:11:2b:b4:9c:
89:4a:6a:68:c8:8c:f7:27:e4:1d:a1:2f:9d:c1:bb:e9:a6:1a:
0d:17:04:88:48:46:16:55:19:ab:24:89:13:88:b8:79:ea:ba:
af:75:37:f4:a7:34:6d:60:53:b9:ee:f6:1e:3c:ff:0a:c4:24:
c8:c2:d7:f0:82:7b:d6:da:3c:11:d4:fb:d6:cd:06:de:f1:b9:
f1:46:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:44 2025 by rpki-client