Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.cer (raw, json)
Hash identifier: PNmp3fluXDA63BUes4d4+VmlXwAzSHym0cE7whwk8I4=
Subject key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB27AEC87B7BE346C986321ADE10AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215411
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:27:ae:c8:7b:7b:e3:46:c9:86:32:1a:de:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:eb:44:b0:1e:2b:fe:bf:9d:97:1b:e8:8c:
26:c1:00:6f:42:1f:a3:68:27:dc:38:38:0e:23:a0:
ca:81:ef:f4:91:33:ec:3c:0b:f1:7d:ca:82:f3:f8:
44:38:7e:ea:a1:13:67:c2:70:69:0c:e5:30:6b:a1:
db:f2:bf:0e:f6:65:00:aa:d3:d0:84:94:d1:9d:b9:
77:26:68:ff:aa:47:5c:07:93:6c:51:96:97:3b:28:
7b:c0:e9:63:e9:46:59:b2:ff:5e:b2:48:e6:51:a6:
69:ec:5e:9d:17:3f:f0:60:ea:5d:75:58:c3:c5:1e:
2c:01:c1:3b:4a:b7:cd:57:a1:76:47:e5:7a:be:48:
c4:67:e5:43:00:20:d1:a6:f0:f8:bf:4b:aa:09:11:
0b:6e:08:86:b6:06:5b:af:77:0e:81:f2:aa:cd:25:
7c:d3:b4:1d:18:2a:f8:16:5b:de:80:2a:59:0b:e7:
ed:fc:09:4e:9b:dd:0d:f7:72:3c:b4:45:88:18:e5:
e9:04:91:2a:32:45:2d:71:4b:ab:47:36:d2:ba:e9:
46:83:e4:7a:4b:65:09:fd:ba:c7:be:ba:d9:26:c0:
d4:88:9b:69:9a:65:15:0d:af:d0:7c:c6:3f:da:38:
bc:c0:e4:51:bb:44:60:fd:35:d6:5d:0f:ab:b9:c9:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215411
Signature Algorithm: sha256WithRSAEncryption
39:3f:85:5c:bd:15:33:18:61:66:75:47:8a:f3:1e:27:0c:c4:
00:ba:47:72:8c:3b:1e:3a:2d:ba:aa:00:c6:bd:d8:a4:b0:bd:
5e:72:a1:15:c6:a7:96:12:f4:4b:83:da:5e:1d:9f:cf:f3:34:
04:31:de:c5:9d:76:55:2d:c3:be:0b:03:49:e2:c3:e6:64:e6:
3c:42:87:52:b1:ab:44:e8:8b:3d:a7:95:7e:10:0d:04:15:b0:
06:e0:a3:fe:a7:93:5b:44:cd:cb:6f:ef:12:35:a1:74:3e:e7:
ad:8f:65:b0:c7:bd:32:95:94:47:95:55:07:98:19:0c:ba:52:
86:75:50:4b:a3:ad:0b:74:0f:c1:be:cf:3e:c4:e4:5e:7c:f7:
b7:e6:6b:48:bc:14:b5:cd:67:c9:b7:09:45:84:eb:af:e4:e7:
1a:9b:58:06:20:d2:43:44:d1:a4:7c:bc:96:a5:0f:7b:74:ae:
52:9d:60:e8:6e:4c:d4:df:df:10:20:5b:06:41:90:7f:07:c2:
b4:8f:32:8a:60:bf:ed:b6:51:34:bf:63:8d:6c:7e:40:24:8f:
ff:5a:e8:19:42:35:3e:1a:0d:aa:bf:2c:9f:30:52:59:6e:5d:
01:c4:b1:87:5d:c3:0e:36:9c:42:59:34:be:0f:70:f9:f0:12:
24:e2:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:24 2025 by rpki-client