Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
File: 36JPgpi-GMimnxgSjwZOcAPh090.cer (raw, json)
Hash identifier: x4xMpZhLYZyk6/ddEarkztKXBMpZ0z0B0xtmnKFreWw=
Subject key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D599FAE2FDF66B6FA4C897643819F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60033
IP: 2001:678:b5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:99:fa:e2:fd:f6:6b:6f:a4:c8:97:64:38:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:98:9d:8c:0a:6b:11:be:9e:0a:43:ac:79:
b2:0c:92:ae:cc:9c:4b:d6:e5:4b:44:65:37:1a:4a:
d2:71:63:dc:6d:ec:22:fd:02:23:9c:68:e9:f8:bc:
25:05:55:b6:3c:62:44:89:2b:97:7b:50:28:76:ff:
95:7c:0b:4d:3a:8a:b4:c6:66:67:da:fc:97:20:63:
f7:13:b6:85:f7:8b:8b:a3:1b:1c:b6:4e:b0:b3:df:
df:96:66:c8:aa:0d:55:6f:6c:2d:0f:8c:d5:03:67:
ea:43:14:ff:3b:ce:90:8e:08:51:48:7a:15:ba:ef:
cd:5a:8c:2a:d3:99:ad:a4:3c:43:6f:27:47:1c:5c:
c8:2e:ae:6e:f9:2c:1a:d7:a6:e9:c1:48:59:3b:a3:
aa:e4:97:e6:f5:e2:0d:d4:ea:21:97:0b:b3:be:b5:
2a:68:fa:09:3e:cb:db:be:ee:2f:e5:70:ca:45:d7:
53:80:7d:ac:bc:83:c3:13:ab:24:da:9e:90:d0:6d:
e3:af:b5:28:08:7e:d9:5a:48:e6:fe:d7:15:f8:60:
10:85:54:6e:e7:0c:13:38:79:36:bb:08:a0:be:33:
80:a2:18:7e:a4:93:df:3c:4c:a5:9e:0b:d9:17:b1:
33:2b:9e:ac:cb:41:29:68:a3:50:83:e2:11:d2:30:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60033
Signature Algorithm: sha256WithRSAEncryption
37:81:4c:3a:f8:9b:94:12:0c:80:64:d3:89:a3:47:45:f8:bc:
c5:74:45:d3:35:7c:eb:99:cd:2d:04:f4:90:a1:d6:e4:a8:97:
2e:af:cb:91:39:cc:92:b0:85:46:2a:d9:df:88:c1:c5:0d:d3:
18:57:77:d0:b2:10:66:d5:af:d4:fc:11:ea:eb:ba:82:0f:4f:
af:c2:9a:47:6f:9d:82:32:08:3f:07:de:c5:90:71:8b:78:dd:
11:29:c3:85:b5:79:e8:2d:ad:62:2b:60:a9:05:21:ed:dd:eb:
ab:6d:11:74:c5:1e:ef:38:2b:35:2e:12:40:e4:1b:ed:a3:55:
1d:3d:7c:76:a0:3e:ba:45:bc:4f:4f:9d:f2:bc:2a:57:83:14:
64:b2:a5:b4:29:5b:d1:ae:f5:8d:17:de:46:b1:64:8e:d1:35:
dd:bb:3a:05:bc:75:56:71:5d:ab:e9:0a:97:8a:a2:61:98:c1:
b0:f8:39:f3:8d:54:5b:13:5b:a7:ff:e2:bc:65:b6:6e:c7:3b:
34:40:b4:52:ca:f5:9e:6f:4e:b9:b7:19:d0:bb:09:24:ba:fb:
0b:bb:6c:96:6f:2e:b0:4c:89:13:43:d4:5f:71:8b:c5:21:6e:
56:96:0f:df:15:5b:ec:43:53:98:fc:6e:1c:03:9a:54:4a:30:
4c:fe:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:40:44 2025 by rpki-client