Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.cer (raw, json)
Hash identifier: W3jbN59qfGq3JWlTbsQTTDTGSO5WQ2FgXbOVI+rrdRU=
Subject key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946A3127616CAAAE45C72D5872BB8F2074
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 13:39:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212730
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:31:27:61:6c:aa:ae:45:c7:2d:58:72:bb:8f:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 13:39:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:d2:59:0d:88:6a:dd:74:9f:bf:e7:13:7e:
c5:e5:64:a1:b8:2c:3b:61:a4:24:7b:3e:ed:54:d9:
0c:9e:1f:71:cd:a9:6e:0f:fb:62:62:cf:2d:74:ba:
5e:65:84:7b:d5:45:0a:2a:55:63:f6:94:c9:84:9b:
69:88:90:fa:d4:47:39:57:e4:a7:20:46:d0:0e:42:
9e:e9:2c:a9:40:62:20:21:65:19:42:4d:4e:f9:00:
46:51:b8:72:65:cc:86:d0:c2:e9:e7:f3:b6:54:4c:
46:76:e1:e0:90:3a:75:6e:f0:a0:cf:51:6e:86:d4:
9b:b4:e3:c0:09:5c:e3:37:d1:70:1c:ea:eb:e8:8b:
a5:dd:0d:26:39:bf:c4:b4:bd:9e:0c:a3:1c:47:7a:
fd:05:00:a5:50:7d:ee:1b:bc:01:53:23:80:8f:8e:
50:e9:3f:50:d6:bf:2b:c3:78:cb:97:88:a7:17:3c:
c5:8b:1f:e4:df:77:89:bb:8a:43:3c:83:cd:2e:4e:
f7:29:30:a0:d8:10:48:ea:e5:06:2b:f9:6b:93:a5:
7b:bc:4d:c3:ab:b8:ad:05:71:0c:4f:2b:1c:ec:4f:
48:72:6d:2f:33:ea:00:34:8b:0e:e0:be:80:ce:83:
49:8e:5b:b8:03:5d:c0:32:e8:87:9b:c7:49:27:5a:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212730
Signature Algorithm: sha256WithRSAEncryption
ab:ae:f9:e1:af:92:50:d7:c3:26:51:7a:77:56:35:f8:e8:81:
6a:e3:6d:79:b7:7d:97:07:a5:41:b0:18:4e:99:ae:a9:87:90:
05:43:8f:d7:3f:7a:ea:44:49:55:99:94:da:c0:33:a1:95:c3:
1e:5e:30:b9:cd:0b:10:91:c6:cd:ab:5c:3c:bd:b0:f2:fd:52:
60:fb:be:33:63:82:7d:bb:2b:d0:9f:8d:42:ea:6e:ec:40:75:
a0:63:32:13:f0:5a:74:1d:c5:4d:c8:13:cc:2b:d2:71:50:c8:
eb:bf:01:1c:21:a9:92:9d:54:dd:4c:8c:9f:1c:9b:41:2a:90:
73:a5:af:e0:f1:88:dc:36:36:cb:24:91:17:34:be:53:9a:ea:
e2:f7:7e:2a:4c:60:78:bf:c9:e8:7e:5a:d2:ff:8e:71:ca:22:
11:d2:44:ee:81:3b:1d:85:7b:a7:29:bb:1e:ce:9a:e1:a9:35:
76:82:cf:fb:71:f5:99:ae:81:d4:00:6b:f4:28:51:54:6c:ae:
dd:1d:ce:57:6b:57:a0:c5:74:05:ed:de:c4:e4:8c:2e:2e:b8:
c9:e8:05:3e:54:7e:0c:0b:05:60:c8:13:27:7a:f1:8e:c2:ab:
6c:d3:e8:24:2a:94:26:ab:ac:d4:45:5c:dd:cb:0c:8a:3d:f8:
4e:ab:11:31
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZRqMSdhbKquRcctWHK7jyB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE1MTMzOTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTk5NzExNjdmOTNmYzM0YjNiYzQ3OWJiMjFmZjYyZDNiZjNjOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x3SWQ2Iat10n7/nE37F5WShuCw7
YaQkez7tVNkMnh9xzaluD/tiYs8tdLpeZYR71UUKKlVj9pTJhJtpiJD61Ec5V+Sn
IEbQDkKe6SypQGIgIWUZQk1O+QBGUbhyZcyG0MLp5/O2VExGduHgkDp1bvCgz1Fu
htSbtOPACVzjN9FwHOrr6Iul3Q0mOb/EtL2eDKMcR3r9BQClUH3uG7wBUyOAj45Q
6T9Q1r8rw3jLl4inFzzFix/k33eJu4pDPIPNLk73KTCg2BBI6uUGK/lrk6V7vE3D
q7itBXEMTysc7E9Icm0vM+oANIsO4L6AzoNJjlu4A13AMuiHm8dJJ1q48QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN6ZcRZ/k/w0s7xHm7If9i0788mEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2Q5YmU0
MC1jZDQyLTRhNmMtOWQ0ZS0xZGZiZDFlZmQ1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZDliZTQw
LWNkNDItNGE2Yy05ZDRlLTFkZmJkMWVmZDVkNC8xLzNwbHhGbi1UX0RTenZFZWJz
aF8yTFR2enlZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM++jANBgkqhkiG9w0BAQsFAAOCAQEAq6754a+SUNfD
JlF6d1Y1+OiBauNtebd9lwelQbAYTpmuqYeQBUOP1z966kRJVZmU2sAzoZXDHl4w
uc0LEJHGzatcPL2w8v1SYPu+M2OCfbsr0J+NQupu7EB1oGMyE/BadB3FTcgTzCvS
cVDI678BHCGpkp1U3UyMnxybQSqQc6Wv4PGI3DY2yySRFzS+U5rq4vd+KkxgeL/J
6H5a0v+OccoiEdJE7oE7HYV7pym7Hs6a4ak1doLP+3H1ma6B1ABr9ChRVGyu3R3O
V2tXoMV0Be3exOSMLi64yegFPlR+DAsFYMgTJ3rxjsKrbNPoJCqUJqus1EVc3csM
ij34TqsRMQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:37 2025 by rpki-client