Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
File: B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer (raw, json)
Hash identifier: aVf08tdsq6HWzCLBs7p1ltiX/29CTwyclx3figkLN/s=
Subject key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E4F568EF94F9EDC7C0CEBFDE0880
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 19399
IP: 131.205.0.0/16
IP: 136.155.0.0/16
IP: 147.180.0.0/16
IP: 159.38.0.0/16
IP: 192.44.240.0 -- 192.44.251.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e4:f5:68:ef:94:f9:ed:c7:c0:ce:bf:de:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07730862dfb740166df453fb6e9c8508af5d9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:98:20:bf:3e:0e:00:81:ae:70:55:ce:88:
ab:91:97:0f:be:ff:f2:70:05:b5:6c:7e:26:ba:4f:
a1:ce:ca:ae:63:e7:46:20:13:ac:e7:93:05:4e:62:
e1:b9:49:f2:88:16:9f:d4:39:85:3d:14:5f:0f:c8:
5d:03:3d:d6:2e:f6:84:f5:d8:ce:3f:24:62:df:e5:
69:39:b8:1a:3a:22:6f:01:90:05:14:7a:be:c5:3c:
20:38:25:fb:b8:ac:47:8f:a4:47:99:18:1a:2c:51:
dd:ff:f0:9c:3d:36:fd:60:38:d9:75:ed:ef:1a:da:
68:3c:04:50:87:11:b9:f4:0f:00:4a:48:c6:e2:11:
c0:9e:89:d3:36:a9:d5:6e:6e:10:7d:27:c6:c2:a7:
22:6e:b5:b4:5c:be:4a:8f:be:7a:85:c5:e1:23:99:
84:e3:41:5d:9f:7f:51:9b:ff:f8:cf:41:96:b3:c2:
7a:34:fe:61:0c:d9:5e:92:d9:a8:93:0b:95:19:2e:
45:02:13:25:0b:99:bf:30:22:3c:df:c3:4e:4c:9f:
51:0d:2a:12:4b:24:f4:0d:ee:2a:ef:e6:61:6f:bc:
85:37:a8:fa:71:fe:fc:39:61:51:5b:bf:ea:a9:dd:
6f:32:c2:9e:5e:13:b3:8c:1d:ce:49:67:d5:b9:a9:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.205.0.0/16
136.155.0.0/16
147.180.0.0/16
159.38.0.0/16
192.44.240.0-192.44.251.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19399
Signature Algorithm: sha256WithRSAEncryption
8c:14:40:8f:3a:10:73:ce:85:e1:1a:03:49:ca:07:fd:22:28:
8c:16:f1:84:e5:c8:8c:d0:fa:25:b1:92:e2:b5:3c:3a:0c:c5:
ad:b8:6b:3f:76:93:a1:be:a1:9e:ac:22:75:6a:93:53:5b:a3:
3a:85:8f:f3:db:d5:2a:f9:ed:b3:b4:13:55:b8:16:fd:35:5e:
9b:5f:e4:12:ef:b5:23:92:77:3a:81:0c:fe:33:bf:ed:16:e9:
fd:ef:32:26:69:25:6f:ec:14:1a:7f:f9:6e:78:30:3a:1e:b8:
90:f6:4c:f0:35:cb:d2:8e:05:c7:02:fa:69:bd:0f:3e:b4:4a:
f8:95:cf:d1:0b:92:1f:ad:17:ce:85:19:25:54:8e:2f:cc:60:
3b:0d:de:a4:42:21:df:27:49:09:b4:c5:6a:c4:a2:b6:e8:ee:
0b:96:d9:3c:7e:1b:30:b1:d0:b3:66:96:8d:d8:1e:22:e3:e3:
68:d4:fa:e4:28:87:ea:35:47:16:46:19:22:3c:42:1f:61:4e:
3b:7c:66:c5:8a:10:dc:9c:8a:dd:d8:e1:d6:5e:ce:1e:b5:e8:
28:f6:a2:cb:b0:66:0b:21:4c:f0:c1:ec:57:f7:1f:88:b9:b9:
6f:20:3f:09:e5:b7:ff:36:07:58:78:ff:29:66:4e:b6:7c:56:
20:d4:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:33 2025 by rpki-client