Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.cer (raw, json)
Hash identifier: 3G118WhyY9KDv5o9ne9Sh8SWTLoojzm9LOf5kh7YAV8=
Subject key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5EF39B3694A7FBEB1B8A10EDE6821
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197962
AS: 212722
IP: 176.126.161.0/24
IP: 2a10:500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ef:39:b3:69:4a:7f:be:b1:b8:a1:0e:de:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:9f:93:e4:96:51:1b:b1:67:0a:cd:49:f6:
78:da:fd:ca:83:97:9f:a8:1f:ae:a5:2b:15:00:4f:
00:7c:1f:a8:56:86:f1:36:b9:d5:be:4a:ac:f6:72:
3e:78:0c:bb:f1:7a:a9:fc:a1:46:5c:01:86:cc:15:
37:48:9b:9b:62:5a:49:d6:ba:33:34:79:e9:9d:78:
40:a5:9d:c5:bc:e0:5f:7e:2b:95:40:9e:2f:f6:27:
7d:b2:60:f9:ae:be:d3:ed:fe:22:00:0f:15:0b:56:
1d:29:d6:95:cf:8f:50:ef:ff:bf:eb:5c:b8:db:38:
48:dc:7f:cb:91:ac:56:10:2e:33:1d:ae:61:2d:85:
25:f1:b6:3d:74:35:60:c2:2f:33:ab:d6:7b:4b:5c:
47:49:01:88:43:eb:56:7c:65:e5:0b:a7:24:64:7c:
38:cd:48:7c:04:32:22:e5:2c:81:17:87:d6:d8:91:
fb:76:5d:78:dc:b8:36:3d:05:c0:90:79:69:d9:88:
d3:b2:37:78:10:4c:ee:1f:65:a3:2f:d1:84:08:a7:
23:02:6d:7d:6a:04:b2:5e:3a:73:e4:92:c5:24:49:
dc:eb:e6:68:95:fb:0b:d7:3e:86:76:10:3d:d3:f0:
4a:99:51:35:26:26:c9:69:a3:a3:cc:b9:3e:21:51:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.161.0/24
IPv6:
2a10:500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197962
212722
Signature Algorithm: sha256WithRSAEncryption
57:68:29:46:d2:6d:4c:31:39:19:7a:e2:84:5d:1d:8f:73:16:
8b:26:83:52:65:d8:02:56:e6:e9:55:58:9e:97:52:df:32:4d:
a2:9d:85:54:f5:d5:a0:c4:9b:30:a1:92:32:fa:fb:f2:07:f5:
f4:f5:e5:e2:19:70:10:f6:18:db:76:3f:94:a7:83:a6:5e:35:
a0:c2:fd:d2:f2:00:58:97:d9:0d:ae:26:69:3d:17:a4:d7:09:
9d:4d:5f:70:95:74:7a:81:73:39:6a:e9:62:51:66:25:d4:61:
d3:8d:2e:15:60:be:ce:c8:26:b6:45:da:77:09:51:42:47:d0:
c2:5e:cc:cc:95:60:60:35:7e:f3:f4:a5:a1:38:2d:30:7c:44:
d1:87:fd:5c:45:e1:a2:e9:68:2b:89:df:84:e8:07:20:64:1a:
76:a7:c5:d7:b5:67:d7:26:4c:fc:29:c9:75:32:80:96:2e:ce:
22:ab:eb:86:29:36:b3:00:45:fd:c3:34:5c:78:6f:0c:ee:96:
21:4f:87:51:8f:a0:83:4d:90:70:2d:4d:a3:db:08:64:b3:b3:
b3:29:ed:83:ad:ed:62:ba:68:a3:71:1b:1f:96:69:39:3b:f2:
f7:d7:45:f6:28:13:e1:69:a2:c5:c2:48:8d:40:e7:a4:82:97:
2a:9f:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:03 2025 by rpki-client