Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.cer (raw, json)
Hash identifier: IKYHnR0tmK7dSz3HDjbW8AmYw3iABVDYtdqhPPSGBV0=
Subject key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D801DFF00D2343D4B3C59BC4A2EF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.3.168.0/22
IP: 2a02:5a40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:80:1d:ff:00:d2:34:3d:4b:3c:59:bc:4a:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:c3:05:f4:8b:15:de:d9:b1:6f:12:02:44:
1b:7c:ab:f9:c3:98:f4:45:f8:b2:2a:1b:45:77:66:
5c:29:25:f5:bb:1a:b1:77:30:10:30:05:d8:93:91:
d2:31:bd:fc:78:8a:b8:92:e2:da:88:19:5f:90:7a:
4f:1a:97:37:27:94:5a:16:97:e5:18:fc:eb:f4:0b:
ca:68:d5:a6:ab:bd:5d:ee:5d:dd:40:3d:8f:50:7e:
3b:a2:22:e9:1d:26:48:39:67:8a:39:cc:03:c2:38:
57:55:91:3a:84:1e:7c:2e:8d:24:75:1c:44:40:a8:
0a:7a:ef:3a:2d:b0:42:de:2b:85:3f:15:3a:8f:5d:
4b:4a:39:b0:2c:c3:58:4c:70:48:98:6e:84:82:17:
0d:f9:57:f6:d7:a2:b0:20:c7:9b:bd:1f:20:dd:02:
ee:09:2f:48:98:a5:00:2b:53:09:fa:92:b4:9d:51:
ec:50:73:b3:75:a3:04:ee:ad:cf:b1:00:74:b0:87:
30:d6:30:f7:11:ac:26:62:d6:55:b7:43:1e:f1:c6:
8b:c7:14:f8:c0:7a:b0:d1:e7:64:6c:c0:04:14:fd:
e2:40:70:d7:ed:df:bc:2b:c8:8b:3f:83:08:f5:ea:
a7:46:48:40:5a:63:56:b4:6d:13:5f:dd:ad:9e:e8:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.168.0/22
IPv6:
2a02:5a40::/32
Signature Algorithm: sha256WithRSAEncryption
80:0e:06:a0:e4:fc:6b:7e:98:65:18:be:b1:3b:84:08:61:52:
1e:96:29:0b:d1:33:89:10:10:ee:ea:71:1a:33:83:ec:75:2d:
00:30:b0:89:16:72:b7:27:5a:2b:a7:1e:fa:29:29:68:ed:83:
0a:e8:bd:ec:08:b3:d0:41:5a:f8:eb:92:1b:b8:e2:1d:7c:a2:
51:f4:6e:2a:de:8b:af:25:7b:08:1f:c0:fc:29:0e:d6:26:64:
22:45:e7:01:4e:55:6e:72:ab:72:9f:c4:b1:53:e3:66:ff:c4:
b8:31:3d:5f:fc:fb:33:2d:8d:50:04:eb:9e:7e:59:4a:7d:ca:
30:d0:c0:34:96:8a:a6:48:28:8c:a0:5c:c8:54:63:de:e5:fb:
c2:95:44:2f:33:8c:4e:8b:48:b9:a7:88:e3:9e:bd:90:96:a8:
9c:21:0f:17:82:6c:75:3d:f0:61:8c:05:89:3a:d8:bd:fd:ca:
d1:a0:ac:4e:24:d4:3e:1b:a8:78:d8:3e:59:81:0a:a3:34:e2:
91:c6:47:f1:7e:54:b1:94:bd:0a:8a:52:73:98:11:51:6c:6d:
15:0a:83:e1:3c:06:f8:2d:26:c3:f4:f9:8a:0e:d1:c3:f0:d5:
9b:1a:05:2d:e8:16:75:15:6c:b5:39:0c:40:40:91:2c:3e:d0:
e0:89:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:34:36 2025 by rpki-client