Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.cer (raw, json)
Hash identifier: ZB2KAElwnk8ID/bG3/1lXrfto6GCW8N7JBnQszvlKTA=
Subject key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D8083C2E74EDE19B7F60902D6F8798
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 139.20.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:08:3c:2e:74:ed:e1:9b:7f:60:90:2d:6f:87:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:49:7e:d8:5c:f7:ef:77:b0:77:d6:ef:7b:
74:d2:aa:95:07:31:b7:5b:cf:ed:a8:a3:81:8c:54:
9c:37:42:9f:e4:e4:cb:b9:8b:da:6f:d9:04:53:0d:
76:2f:5a:69:2d:f4:bd:f3:db:0e:f9:67:b8:03:c3:
39:3c:46:0c:fc:5c:be:bf:fe:79:d2:06:a1:d4:65:
dd:42:75:78:df:67:59:87:ba:9c:bf:1b:c9:65:05:
05:2b:99:5c:80:35:5d:c4:b0:04:9b:92:ad:51:bd:
bf:2b:08:78:e4:8b:27:75:bc:15:68:8a:64:b4:2d:
0d:18:6c:33:5a:3b:7c:c0:84:ed:e7:e2:81:9e:76:
9b:46:ea:fd:aa:b7:ab:ce:e5:78:30:03:9a:bc:b7:
16:2f:2f:f5:46:02:71:57:73:8e:88:87:f5:0c:61:
c4:ab:31:f7:81:0b:43:fb:c8:91:1a:d1:6c:15:45:
39:31:40:68:99:77:bc:0d:d0:2d:be:33:a8:07:dc:
b7:93:70:f1:54:71:ce:e5:f2:e0:fe:7b:a8:b5:94:
e1:4f:78:cb:19:e3:1e:52:db:66:98:f4:8d:8a:b0:
16:52:50:5e:37:f5:d0:59:04:61:db:79:20:43:59:
ce:bc:f9:51:92:48:07:8e:7c:68:63:83:5a:d7:1f:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:49:74:71:53:ac:23:b1:04:b6:eb:9a:2b:5c:95:7c:be:4d:
6a:23:49:85:90:19:fd:ab:2a:3a:0c:28:24:a5:02:5a:39:a1:
86:1f:5b:ea:67:c9:2d:25:38:25:86:6a:2d:76:ea:a9:d3:84:
4b:85:27:52:13:ca:d8:88:b6:f3:dd:56:97:74:8b:c2:75:00:
6d:6b:e7:7e:b7:3a:72:ee:b4:4a:b8:ec:f5:0e:db:1d:c2:5e:
16:a1:2b:ba:28:bb:4f:b7:0c:bd:47:64:8d:33:4b:4c:13:8c:
8d:82:94:13:c8:74:67:a6:46:ff:fd:c9:1d:13:c1:25:e4:2d:
07:02:42:4e:ec:25:b4:2a:8c:95:c4:74:eb:34:06:e8:54:a0:
35:6d:78:f2:9f:95:80:1e:c1:15:63:ae:e4:cc:e1:3e:bf:c6:
fa:fa:c7:ea:a9:19:23:2c:82:0a:42:2e:f7:84:ae:65:10:4d:
01:b8:cd:c0:b1:00:92:60:70:24:ae:e1:8e:e3:7e:75:18:bc:
1d:e9:cb:e7:22:91:27:da:27:6f:20:3d:68:7f:25:0f:b3:13:
af:18:cf:df:6f:fa:8d:4c:df:44:63:17:c5:29:dc:6a:86:73:
be:9c:f9:64:ca:d5:bc:31:fb:56:e2:4f:28:73:69:11:a9:5c:
c3:c2:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:08 2025 by rpki-client