Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.cer (raw, json)
Hash identifier: 0yQCsIsRtGo1hryXHG7+m3X6wOrX2Ejxn+H1sTRWWok=
Subject key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBF106F4B9D08CC8E313EF73814C0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.233.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:06:f4:b9:d0:8c:c8:e3:13:ef:73:81:4c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:05:3c:0a:88:06:3a:b8:94:c9:87:c9:89:
7a:1e:ab:25:ca:89:c4:8d:94:01:15:fb:6f:4b:b3:
8c:2d:02:e3:60:c0:3b:bf:84:13:de:8b:80:8d:35:
d0:bc:ac:20:f8:48:76:2d:17:f4:2a:90:72:28:75:
de:75:77:98:c4:b4:4d:0c:cf:ab:f1:05:91:dd:2c:
30:f9:d3:6c:71:23:f8:3d:30:9e:5a:c1:b7:a8:86:
47:99:d0:66:47:af:86:fb:f7:7d:7c:df:bf:4e:62:
7b:d3:0e:60:d0:bf:a2:56:94:3f:89:6c:4b:2e:63:
28:26:d0:5d:0d:a9:54:38:81:7b:e5:5e:8c:13:5b:
9f:e0:77:fe:25:a6:a8:3c:92:2f:33:bd:62:e8:21:
28:d0:d4:e7:fe:ed:61:f6:08:eb:41:6e:b0:89:55:
3a:eb:09:8a:29:29:a8:2d:7c:42:0b:f1:e2:2f:c8:
38:21:e0:47:25:85:d4:7b:ae:c8:a0:03:02:a6:ed:
1b:f5:aa:66:bf:5a:83:9f:69:ae:17:90:2f:fc:64:
90:50:67:db:fc:c5:57:be:53:54:d5:b9:e8:71:c5:
91:bf:41:ae:f3:db:38:b6:66:85:dc:29:14:c7:8b:
53:2b:84:fb:68:b2:9e:39:a7:84:68:68:8e:55:ab:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:54:dc:c2:26:10:b7:60:16:6d:03:42:e4:23:3f:ad:08:c2:
20:84:9b:b7:f9:50:6a:9a:db:69:b5:58:fa:ed:50:f5:9e:7b:
5a:14:58:13:e5:6a:0d:77:75:5f:02:eb:a2:cb:ce:d7:54:32:
1f:2c:07:de:4c:e8:ad:59:20:7c:e6:e3:d1:95:a3:98:48:ca:
ca:20:e1:eb:64:e6:3f:50:a7:34:f9:7f:41:54:34:18:9d:d2:
a2:1a:2f:59:7e:c1:66:52:c9:e3:5c:73:d6:9a:b7:aa:b0:43:
92:e3:99:a8:0f:d8:21:b6:a0:74:21:a6:d6:64:fd:2a:2d:a0:
e3:e4:81:42:15:c7:e3:9e:42:07:73:bb:38:37:70:70:6e:5e:
e2:42:40:2d:fd:48:99:ad:6e:38:17:6e:7f:9b:53:71:3d:11:
2c:e9:11:55:fc:32:e0:02:cb:b2:9f:4d:af:df:86:c3:8a:cc:
04:0f:73:f2:e3:3e:6e:0b:43:07:3a:79:5c:9b:4a:2b:bd:4f:
45:d9:a7:33:27:7b:95:62:bb:5d:ea:bc:7e:07:a9:e8:fe:4d:
48:3b:8b:de:7b:dc:0b:eb:9b:60:ee:8d:67:a0:ed:26:0e:2f:
ed:3b:13:8d:29:a8:f6:ef:c8:6e:41:db:9e:8a:be:ce:e5:fc:
c9:e7:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:54:44 2025 by rpki-client