Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
File: R3faFXdoQj_LqSFzkux_SDs7lEI.cer (raw, json)
Hash identifier: B794bNUIH4zgzZeUjM3knWlfp21wSAsDhxvhVi6x7aU=
Subject key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DEC9538472CF34A3E6591EF835BE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8832
IP: 2a00:1498::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:95:38:47:2c:f3:4a:3e:65:91:ef:83:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4777da157768423fcba9217392ec7f483b3b9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:9f:88:7b:07:6e:71:03:3d:fd:91:ad:0f:
a2:72:42:a6:9f:52:f4:f6:01:32:ee:fa:d9:d4:fe:
19:84:e4:22:d4:74:18:76:47:ef:f5:5b:3f:03:4d:
4e:72:0c:8a:6f:c3:3d:ab:59:40:2d:4f:b2:41:1e:
7d:8d:7c:b3:b1:17:3d:8d:79:50:84:8c:af:60:92:
7d:a0:a0:83:ca:1a:87:2d:61:1e:17:6b:17:3e:7a:
67:b5:ca:9c:89:5e:be:80:5b:82:38:56:12:86:2a:
7f:4e:6f:de:00:c0:03:0b:87:f0:0c:d2:e4:1a:e0:
44:cb:65:11:d6:fa:03:f0:95:11:7b:4f:a6:8c:e1:
7e:04:03:4b:c1:9c:78:2b:ec:0b:43:47:7d:f1:5d:
ec:d3:8a:52:bd:e6:14:8e:15:05:a6:be:c6:8f:06:
9c:da:7d:9e:f8:c3:48:8b:51:07:88:f2:80:e4:22:
24:ec:2c:90:aa:51:df:4e:5d:1a:23:64:28:65:3b:
a9:ba:27:95:92:ea:ee:a3:96:a7:40:af:ef:ba:91:
c0:58:f2:1d:a1:7e:a0:21:15:80:b6:65:70:b6:01:
44:f8:0d:bd:08:11:d7:10:28:24:0e:e0:11:19:21:
34:25:5a:31:e7:be:fd:a9:9d:fe:de:ec:a0:55:b2:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1498::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8832
Signature Algorithm: sha256WithRSAEncryption
00:9f:b8:86:1b:bc:09:f1:71:8d:7b:c3:ae:d7:42:ea:c6:3c:
d8:4a:71:da:e6:eb:23:0b:cd:eb:d9:e2:0d:31:f9:9f:30:eb:
5d:cf:c8:f5:26:c1:64:19:21:4e:ac:0c:73:00:74:a6:86:40:
da:e0:6f:88:d1:5b:f2:5a:62:15:c6:62:86:40:ba:ba:f9:3d:
ad:6e:01:7a:f2:e8:6f:4e:fa:7f:c1:8c:45:2b:58:99:dc:54:
1f:2e:e6:ce:0e:0e:06:8f:d5:08:7b:05:77:a6:ef:c3:94:9a:
99:ed:74:a9:5e:93:65:d4:24:31:8b:35:00:d8:e7:8d:b8:51:
9b:ca:8e:e3:29:5e:e9:33:ef:3c:3f:d3:f7:c5:9a:c2:cf:a3:
66:b5:dd:3a:17:20:8d:c3:02:20:78:da:0d:ce:42:38:34:84:
46:95:5d:0a:1c:b1:25:00:41:c3:bc:13:b3:84:de:0d:f2:8d:
59:8e:a2:e6:1c:5a:c2:3a:0c:13:ce:8e:78:19:62:9f:de:ed:
4d:24:fe:ce:f3:08:e5:c4:03:00:31:c7:af:92:9e:6f:4a:6b:
01:71:9a:70:d9:1f:10:90:cd:a9:77:56:30:93:49:ae:2e:23:
2f:ab:de:d8:b9:a0:33:d7:b0:9b:8e:52:12:52:91:a9:a4:e0:
30:e3:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:03 2025 by rpki-client