Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
File: 3SBri9IhV0yWWSRDGVuQBXacck0.cer (raw, json)
Hash identifier: UfqvsqZ4RqU43mKAOa6qxjsNT96CT3+L4apQWNea3ug=
Subject key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC50CD4749F2BA77B016A1549D276
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56632
IP: 31.7.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c5:0c:d4:74:9f:2b:a7:7b:01:6a:15:49:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd206b8bd221574c96592443195b9005769c724d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:9e:21:b0:27:4a:df:a4:49:fa:86:6c:39:
66:0e:d4:e0:cd:ef:96:99:db:0b:44:36:b0:49:1d:
8f:59:9c:32:e9:9a:40:5d:d5:c7:5f:18:27:41:85:
fa:06:80:87:77:a0:df:55:80:bf:77:d6:7b:53:3d:
33:cd:9b:cf:86:d2:bf:1b:81:b1:20:af:4a:cd:89:
19:0a:78:1c:69:01:4c:a5:54:3f:9d:2c:c9:fa:e0:
7b:34:b3:03:e5:5f:80:c6:59:34:2d:93:f0:0c:c8:
a7:8d:c6:1e:c5:20:a0:2c:c7:4e:93:df:e7:a5:ed:
64:c7:5e:09:54:6f:3b:9a:8d:95:0e:34:cc:28:c6:
13:57:34:4b:39:b4:21:89:33:3d:3c:88:08:da:4a:
6b:b5:c9:a1:d2:23:81:21:5d:3f:89:35:16:1a:69:
a4:94:a7:bf:73:57:ae:dc:13:bf:a0:98:23:57:29:
a8:30:3c:8e:d7:17:b1:87:c8:ee:a1:23:fe:80:e1:
fd:ba:1a:9a:d8:82:b6:1d:b4:ba:64:ea:06:d7:0f:
fd:86:02:96:d6:48:28:7c:77:99:34:78:4e:d0:31:
2b:07:55:46:a3:68:e6:22:11:0f:01:38:4d:5c:43:
b6:b9:74:05:24:5a:59:a1:76:6d:1b:bc:0b:48:6d:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56632
Signature Algorithm: sha256WithRSAEncryption
ae:9f:5c:1f:67:2b:4e:d9:cd:75:ce:f3:c3:27:3e:c6:7c:07:
e0:45:9a:f7:d4:90:6a:65:7b:5e:30:a9:d1:97:00:6d:50:af:
9d:0c:03:f7:17:b4:92:85:d8:ba:94:5f:6a:51:42:08:99:8b:
81:12:21:56:dc:ad:09:27:89:a2:cc:bf:07:dc:d3:40:17:07:
77:4e:aa:16:75:05:00:4e:eb:ee:18:a7:05:04:a4:c3:e2:ca:
03:f5:6a:d3:e8:b6:6f:61:4d:c2:1e:be:9d:81:3b:40:82:ee:
f6:ad:73:96:8d:97:dd:e8:80:45:4a:e8:fb:83:b6:a7:8d:90:
5a:f7:ac:13:63:0f:ac:2e:f0:a7:c0:46:5a:12:c2:4a:03:95:
c9:88:21:8c:c0:7b:2c:e9:55:42:9c:da:fa:64:0f:40:9e:a2:
69:3b:f3:d6:af:ac:fd:44:5f:6b:03:a7:60:bf:4f:a7:81:af:
a7:15:44:3d:f9:bb:3f:92:ec:39:a9:40:54:73:a9:bd:a9:81:
df:48:6f:6c:4e:1e:6d:1c:eb:02:12:18:0b:d7:99:a4:6f:e3:
d9:c6:7c:9b:e5:bc:88:4d:d7:29:e7:53:68:22:a4:73:0f:5f:
d8:db:aa:67:74:ea:c5:4d:d2:24:05:5d:24:af:7b:c6:75:24:
50:d0:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:32:05 2025 by rpki-client