Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
File: OndQiZTKTSzBidNfM4KiqKtXuEs.cer (raw, json)
Hash identifier: vI1FaygqobqMXP1fSc7UC89Zl7Mr0iWkTH14Xnuv3q0=
Subject key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266ABBE4D5C4BC8BA1C14920E404EF44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48650
IP: 195.8.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:bb:e4:d5:c4:bc:8b:a1:c1:49:20:e4:04:ef:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:ce:95:fe:84:42:7f:a7:39:af:05:d9:50:
df:74:ef:78:be:22:c6:5c:70:81:6a:72:24:77:95:
b6:ee:78:df:f2:b1:70:1f:f6:de:c3:72:40:72:d1:
42:bb:a4:3c:af:e2:a9:d4:e8:33:11:6d:ca:0f:c6:
af:7e:bb:03:60:50:00:6d:0d:cf:93:21:dc:10:ea:
07:67:95:6d:91:75:1e:48:f5:5f:0f:a9:6d:7e:27:
01:28:07:ed:32:fc:f8:a6:73:ea:6f:f6:a0:1a:b5:
0e:e2:28:2a:26:87:eb:06:67:0c:1d:5d:66:8e:5c:
ed:de:4e:4b:c8:fa:8c:61:09:9e:36:09:b1:fa:4c:
2a:a1:bb:ff:16:a4:97:da:0e:80:09:7e:6f:80:74:
45:bb:c0:0b:cd:3d:0c:2b:7f:dd:f0:5d:0a:93:aa:
e6:24:30:61:d8:79:71:f9:27:d7:f8:da:ec:2a:a0:
ce:7a:5a:e7:98:f9:81:55:c7:93:a9:db:94:d0:72:
54:02:95:35:36:9a:30:08:fe:28:f0:8a:09:87:56:
f6:ab:0f:e1:31:bb:32:04:20:7e:94:ff:bf:a8:10:
f2:54:33:e0:2e:a9:b0:7b:82:29:21:74:14:91:10:
fa:7d:87:82:40:8c:8f:ba:aa:ad:ef:6a:91:42:c5:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.40.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48650
Signature Algorithm: sha256WithRSAEncryption
2b:46:7b:06:d7:63:66:c6:cf:c5:63:bf:da:8c:a4:21:8e:2b:
ea:67:83:aa:9d:a7:4d:59:76:8f:85:0d:e4:d3:e3:4f:69:58:
98:42:c7:51:4e:23:0d:26:61:43:f4:e8:ac:7b:ab:c1:a0:17:
fc:b8:5f:f8:46:82:87:23:5d:4b:7d:71:11:3e:62:e8:6a:d8:
0b:51:6a:9d:f8:49:4b:9c:86:28:62:e1:ca:03:f7:2b:d4:c4:
61:2a:c7:3b:29:1a:8c:92:ec:8c:a7:5a:c9:69:4b:e7:3b:04:
95:0f:ad:12:a9:c9:a7:d2:05:08:d3:8f:7f:a8:6e:d2:be:17:
56:aa:92:67:72:f1:40:b9:a2:40:f9:2f:ab:ca:14:8a:2f:ab:
f7:66:d6:e7:00:4c:31:63:5d:48:4f:77:28:d4:d2:d6:c7:f8:
15:c1:7c:cf:a9:93:d4:15:df:99:3e:43:60:0f:e7:f3:2a:17:
2b:d7:ec:7c:3e:f1:d8:d2:62:9d:85:72:19:37:b3:ff:c1:2a:
17:32:35:98:08:fd:e6:e8:24:d8:93:4f:a3:53:a7:7a:87:ff:
8d:77:76:49:fc:3a:49:4f:4f:69:d5:6a:3a:ad:6c:3e:6f:85:
58:70:74:44:ee:0a:20:82:a8:80:3c:b3:26:4c:8f:99:cf:32:
68:20:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:19:47 2025 by rpki-client