Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
File: 3N7T6jumc6gIz15q3LUep_M_QgM.cer (raw, json)
Hash identifier: Gukx/wEIu9GNbs+yDpM8CMqHJxzO1OKnARbnZkcgDe0=
Subject key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3DD540328612C871FB5BD38CDFCD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199495
IP: 91.223.146.0/24
IP: 2a13:bd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:dd:54:03:28:61:2c:87:1f:b5:bd:38:cd:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:18:c7:99:40:9c:92:11:e9:c2:4f:88:57:
4b:55:ba:e4:e4:02:78:bd:b8:e8:ec:19:e4:be:ea:
e7:f7:e8:a4:50:d7:1e:87:60:fb:9d:ac:b3:38:8c:
3a:be:5a:e5:b9:03:d4:d5:dd:22:c4:c1:4f:47:fc:
9c:fd:69:65:48:94:d4:de:e9:b2:41:79:90:87:09:
50:86:15:4a:8a:a6:60:80:86:d5:e3:a1:46:9f:a2:
3c:a3:f6:5c:46:31:d4:70:08:be:2e:cf:fd:61:91:
c6:82:94:18:84:ff:62:c2:13:40:00:a9:a5:62:fc:
59:01:28:a7:1a:0a:4f:4a:1c:45:eb:8b:93:48:b1:
4e:a7:9c:aa:e2:6e:60:31:d4:85:a9:51:50:95:02:
88:82:a8:83:90:b0:7a:86:18:a6:6d:f7:1f:d4:80:
3e:fa:55:85:d3:89:97:3f:86:19:eb:8d:e2:ff:ed:
b1:c2:eb:44:05:e5:7e:95:4d:05:fb:22:ac:f4:0e:
99:b7:2e:65:69:c0:07:3c:c6:d2:37:b9:a3:4b:f6:
5f:b1:b0:f5:a2:66:89:3e:01:f9:2c:69:09:f5:ce:
8e:9d:fc:4c:4a:10:b4:5d:13:56:94:87:82:f4:24:
6f:d7:24:f0:f9:0b:1d:af:58:4e:a2:90:30:96:3b:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.146.0/24
IPv6:
2a13:bd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199495
Signature Algorithm: sha256WithRSAEncryption
ac:d7:63:90:bb:48:56:7d:f5:b2:54:bb:ac:9f:ef:ce:74:25:
96:25:7e:51:24:40:ff:de:ca:53:c0:67:cc:c6:29:13:d8:db:
f9:3b:dd:4b:ee:af:b8:c3:3f:6d:f7:52:48:85:a7:e5:47:7e:
c7:52:1d:ac:e7:92:20:e1:ce:49:39:fe:ee:71:ec:8b:ab:48:
83:bf:8a:e7:eb:da:45:82:4a:bf:cd:19:0b:e0:e6:d0:10:d2:
78:4f:34:98:46:49:b4:56:fd:7c:b2:6b:ca:f4:79:c0:9d:09:
d1:c9:b2:f5:67:d6:c0:ee:26:96:63:1b:9b:93:e6:da:d4:66:
b9:93:4d:d6:d0:e3:44:7d:96:cf:b3:f9:c6:72:20:19:2a:d6:
a4:c9:87:75:7b:af:0f:fe:4f:ea:05:f7:c8:5e:f5:41:d1:02:
99:1c:fd:0e:11:fc:b4:2a:dc:29:5e:0f:58:67:fb:83:d5:69:
8c:c7:5b:c9:61:54:3a:0c:99:65:01:b7:dd:99:33:c0:b1:da:
e8:43:2a:71:4f:65:05:eb:f0:4d:70:56:dd:ab:a1:05:5e:c7:
b4:38:92:8b:b8:c6:cd:21:8f:06:81:a9:55:00:74:ba:58:0a:
29:41:8c:77:a0:b7:71:f5:a6:3d:7d:10:1a:7b:f9:c4:34:31:
b3:8b:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:30 2025 by rpki-client