Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
File: 03fcZqVjo68h7gerM-i__nr5KI4.cer (raw, json)
Hash identifier: vaoK1x+KPSuA0t/F8GJQJ/pOg+z2l2pK+kdCBFAwVGo=
Subject key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59CB3BCF767E72E4330BB3952A6DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 146.19.165.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9c:b3:bc:f7:67:e7:2e:43:30:bb:39:52:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:8a:96:89:c2:8b:79:64:db:ea:42:3e:49:
4c:29:f3:ad:96:bb:58:b4:6d:3f:98:cd:90:d8:cc:
d0:01:e8:08:aa:38:77:aa:03:d2:16:99:a2:64:14:
b4:a3:87:21:b4:ec:23:43:81:08:36:5a:6d:03:91:
c7:6c:c7:bf:02:a8:5c:31:c3:2a:0d:72:c3:49:17:
16:86:b9:fb:b9:94:a7:8f:f7:e4:1b:14:d4:ba:9c:
38:05:cd:ff:97:b6:69:55:74:f3:ba:45:6d:1e:37:
f7:4b:0e:cb:85:fd:38:0b:32:ef:7c:14:de:05:13:
a1:a0:5b:2d:e3:22:43:31:11:49:cc:56:b6:a6:ed:
87:e2:fb:90:a1:22:4b:34:41:7b:ba:db:f2:e8:f4:
82:30:c6:52:11:75:e8:97:18:61:71:5b:33:a8:5e:
5e:a0:ab:4a:18:3b:91:65:e0:b5:b1:76:2a:00:08:
d1:3d:27:8e:2e:d9:aa:ca:6f:47:f5:70:4d:c1:59:
44:b8:65:dc:fd:45:32:a0:fa:e8:f1:fb:e1:df:b5:
f6:dc:df:2e:81:ed:26:2b:9d:59:82:21:89:e5:08:
e1:bd:bf:1c:bf:ae:5e:47:f2:07:6a:c9:89:0f:58:
a8:15:de:33:a2:f7:36:0d:e6:70:9d:e7:43:38:a5:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d8:f3:cb:b0:e6:65:bd:cb:67:3d:fb:e7:40:17:d5:4e:27:
a9:1e:54:82:04:46:3d:fa:99:fa:ef:c0:28:44:62:8b:81:27:
e4:ae:0f:04:5b:43:f8:88:f1:2d:bb:7f:0c:1c:19:38:58:8d:
c4:bd:27:10:b9:e3:a3:75:7d:0a:d6:9d:f0:4b:04:fa:4b:50:
3b:32:8e:7d:23:9d:e7:49:d3:0c:47:0b:da:ad:6b:5d:75:cc:
cb:36:05:35:11:3e:4e:c2:49:12:53:a4:ac:b1:25:c9:39:95:
82:de:b4:34:85:1a:aa:d5:cc:68:62:08:64:a8:0c:e1:64:ac:
cc:72:c9:4c:97:ce:a5:1d:56:73:4f:39:06:f5:be:ed:b1:4c:
78:d4:d5:15:a9:08:de:94:05:5e:8b:01:de:43:3c:30:b0:2d:
9b:1e:33:86:19:d4:2c:6b:e6:01:bb:9c:da:70:19:c3:e3:01:
ef:ab:41:31:95:f7:a8:b9:ac:fd:40:ca:2c:d9:60:5e:f9:19:
11:d4:0b:c0:83:af:90:bf:6a:df:8e:0d:64:11:8b:ff:13:ac:
ff:f2:2a:4d:2d:eb:50:64:0e:9a:43:d3:4f:56:6b:77:55:84:
19:9d:c9:bf:a6:46:6a:13:5d:eb:fe:86:b1:f8:a9:95:ce:24:
d4:54:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:38:55 2025 by rpki-client