Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.cer (raw, json)
Hash identifier: fQCENeBk+O9YSNKdj73ZUq4IhFW1ukMvKobrxQuIA6M=
Subject key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826FB6D8B2B90062CD8F88F89522EC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50330
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:fb:6d:8b:2b:90:06:2c:d8:f8:8f:89:52:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:52:e8:03:08:de:b1:28:2f:28:d5:45:2e:
26:37:a3:36:1a:05:9e:e4:22:eb:5f:33:32:04:9a:
d1:26:aa:fd:47:c0:48:dc:c2:4f:18:61:9d:2a:70:
c5:16:62:af:bc:f1:91:7c:2d:4a:03:b4:fc:00:3a:
dc:92:a6:68:c3:04:29:46:d5:ca:d2:87:01:21:dc:
9b:e4:41:34:cf:c9:b4:c1:45:3c:3e:88:6a:3d:0f:
cb:83:8d:7e:8a:c2:66:8e:ce:f3:61:d3:dc:27:a5:
01:44:47:e0:a5:57:73:b7:35:4d:fb:bd:cb:33:60:
07:64:f7:7e:7e:13:b1:ae:18:1f:bb:f4:aa:a1:52:
2c:1f:9b:cf:dc:f9:59:69:ec:f3:f9:db:1e:d5:cc:
2a:d1:e4:c5:e0:31:10:41:21:74:e6:5c:03:3c:bd:
15:c7:40:5f:51:0b:03:4f:63:70:f0:ca:93:06:49:
da:f8:c5:2c:c8:0e:b9:9b:f6:4a:04:be:79:89:43:
b6:33:46:7e:11:be:1c:dc:27:e5:50:3b:77:7f:72:
50:78:62:b0:f2:db:cd:70:ce:36:76:9d:6a:01:b6:
04:24:be:1a:92:fa:71:80:62:9f:86:3e:98:2c:16:
27:9d:c1:3d:74:72:f0:aa:29:0d:69:53:a9:28:43:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50330
Signature Algorithm: sha256WithRSAEncryption
8c:bb:97:10:5c:c6:73:63:a6:71:18:dc:ba:4f:7e:fc:23:b9:
1a:ee:94:a9:a8:a6:c3:d5:ef:43:99:09:b2:f0:d0:43:dd:91:
a0:5f:ac:ef:7f:b0:72:1e:f7:ea:d1:a0:2a:8b:0d:63:d4:0f:
d6:d9:f3:95:5f:29:ef:53:33:c1:5d:02:61:00:2a:4f:b4:3e:
96:99:01:eb:22:ce:3b:00:63:40:a5:34:04:14:3c:e2:8d:4c:
36:f3:aa:cb:4d:de:08:51:6f:8b:b5:b4:64:60:3a:05:e3:10:
e5:30:51:57:2b:fb:f3:b7:9d:80:57:fc:48:ed:10:fa:da:5f:
75:d1:9c:eb:8e:38:55:9e:3d:25:88:ef:00:23:9e:9c:d7:2f:
40:c4:1d:30:85:c7:7c:9b:00:b9:c0:d0:2b:15:0e:47:bd:9b:
8f:c7:85:b0:cc:06:1d:27:93:38:b8:fe:98:47:54:90:68:10:
1f:22:69:2f:ed:9f:e5:38:d0:09:6a:a2:fc:95:92:31:95:00:
a4:d7:5d:9c:43:df:d1:2d:18:7d:c6:26:4e:af:63:bb:65:50:
00:27:9b:32:fa:c6:a8:4c:54:08:87:b8:f8:21:bf:ad:02:18:
fe:45:75:a6:3b:ad:c3:e7:8c:0a:18:e4:c2:3c:37:3e:2a:ba:
10:9e:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:55:11 2025 by rpki-client