Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.cer (raw, json)
Hash identifier: yKP1aqn9l5QpChFbpEBNWdPEde8iWx1ayw8+V/wGaFA=
Subject key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423696A37B4933CEDFA83E677A47D09A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.13.84.0/22
IP: 2a12:fd00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6a:37:b4:93:3c:ed:fa:83:e6:77:a4:7d:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:58:eb:ea:02:19:07:d9:48:c7:ac:62:20:
6a:07:3e:f5:df:05:66:93:18:5f:7e:9e:ae:2e:99:
3c:37:81:38:a7:d0:7f:2c:4b:f1:82:f3:49:c0:80:
9d:b8:17:72:1d:ff:fc:cb:3b:fd:03:a4:c6:2f:11:
15:8f:5a:c8:0c:95:d6:d0:6b:58:09:89:a4:17:97:
bc:3a:85:7c:e1:ff:eb:b2:2d:dd:29:90:a5:84:7d:
ad:e1:d5:64:20:21:6d:a8:37:fa:f9:a5:d3:fc:d1:
f9:14:2a:25:4d:bb:3e:1c:8d:a7:25:be:c4:86:fe:
f2:ab:db:73:7d:d9:21:59:8c:a9:d7:92:66:16:33:
a3:bd:e3:86:e8:d1:f6:c1:65:f0:1c:6d:25:a6:c0:
18:be:f4:9c:d9:84:96:20:bd:d4:3c:2d:eb:1f:64:
49:47:e6:52:6b:25:a4:86:4f:3d:87:4b:f4:c2:a6:
31:01:08:ac:4e:f9:d1:a3:cd:d2:ad:7c:0c:e4:8a:
d7:49:5f:b4:1f:42:e8:00:23:80:d9:24:9d:bf:21:
0f:af:ab:78:29:43:8b:02:63:0f:2c:81:aa:0c:93:
27:ef:34:d4:d5:28:7a:70:04:4a:28:71:02:b8:c7:
39:a6:33:79:a0:9f:48:19:94:d5:3c:1e:23:e3:eb:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.84.0/22
IPv6:
2a12:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
52:7d:d6:f0:5d:29:5e:0c:c5:11:21:c0:bf:f7:44:8c:03:56:
54:45:e4:85:8b:16:d1:0d:dc:c6:2d:3b:6b:51:a1:18:b9:53:
8e:fa:2e:8d:e3:fd:5d:ad:06:38:7b:d9:ef:09:1b:4e:44:ff:
28:f5:d1:72:c6:19:7b:d7:cf:a9:60:7f:a2:de:6a:d8:0b:b7:
ef:4f:39:4a:37:88:8b:05:5a:d2:48:40:ba:6e:17:40:44:d4:
d1:d2:47:53:70:b4:47:95:c6:14:f6:8a:fe:da:7a:da:b3:8a:
41:c9:8a:ed:65:4e:99:a5:7e:30:bc:d9:ae:81:ce:f8:48:72:
2f:37:f9:69:bb:c6:5e:bd:92:a2:83:77:e5:11:8d:c7:33:d0:
5e:53:73:4d:90:71:41:ae:59:4c:e3:ee:ee:21:3f:e1:2a:e5:
34:a5:f5:f3:03:ee:90:c4:7e:01:a4:a9:83:54:99:ba:d5:7a:
a3:8e:d3:46:32:53:af:fb:2c:9a:b1:e7:c8:a4:82:ce:da:8b:
89:34:52:66:ee:7c:9e:04:f2:57:bf:f0:50:c0:b9:87:d3:78:
9d:06:00:c8:8e:ff:b0:79:56:81:17:10:85:05:43:7c:37:32:
74:b9:41:b6:07:f3:3d:73:f9:ae:0b:12:5c:c4:a3:52:e4:49:
53:68:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:48:32 2025 by rpki-client