Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
File: o3sePvrqidz80cjpfA6beAxhRl0.cer (raw, json)
Hash identifier: 6jy2NWHXn4Q+OQETqWpJrm6Cx8TAFX0i9cwZhGDrsX4=
Subject key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5FC8957CBF17D6E6A06802502675
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207691
AS: 215941
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:c8:95:7c:bf:17:d6:e6:a0:68:02:50:26:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:87:1c:e2:cf:c7:79:ab:2a:ab:e4:07:ee:
fd:e8:fc:8a:7b:3d:e8:ee:89:f8:cd:65:d0:da:1d:
c4:f8:e7:fb:55:cb:a9:51:53:91:0f:97:76:7d:47:
06:9a:ce:82:84:54:4a:07:57:4e:94:34:d8:02:d8:
e1:8d:c1:b6:d5:79:1d:2d:b9:61:32:73:b8:76:ab:
38:f3:41:a1:e2:93:6d:9e:9f:6b:4a:cd:23:78:2e:
b3:37:10:6e:07:57:f0:57:01:45:58:42:81:87:58:
cb:e9:83:8a:45:13:59:ec:70:7c:38:05:15:2e:c9:
cc:26:5a:81:96:8c:d8:25:e5:28:c3:12:d7:53:63:
7a:b5:dc:13:79:13:60:df:e0:fc:fc:7a:12:6f:4f:
2b:44:ba:20:11:24:bb:99:30:89:f4:90:66:f7:37:
9c:71:1f:de:75:7f:48:ef:03:f6:3d:e9:d3:23:1e:
37:0f:75:a5:22:4f:5b:74:2c:04:e4:de:40:10:03:
72:87:a5:61:21:a0:1d:c4:f6:bb:67:8d:9d:b8:a8:
35:0d:15:10:a0:27:f6:43:e7:34:60:f8:23:69:be:
77:58:05:b1:2b:27:af:aa:97:61:93:00:ac:32:b6:
85:a2:05:12:5f:43:43:a1:30:5f:c4:3e:c5:a6:91:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207691
215941
Signature Algorithm: sha256WithRSAEncryption
45:cd:26:20:dc:a3:a5:69:e9:3b:81:54:fd:6f:e5:c3:27:47:
8e:22:70:e0:1b:4d:b1:bf:6e:a7:5c:a8:79:0c:29:a3:6c:4c:
8b:f9:50:8d:84:06:18:bf:44:75:88:02:5a:a6:9a:0a:0c:2c:
97:69:76:ef:c5:aa:e1:ac:26:27:5d:8f:56:f4:fb:8b:35:9e:
37:68:cf:b2:ae:3f:67:d0:84:11:cc:97:23:f8:25:d4:20:47:
eb:07:36:63:c0:1d:a9:9f:1c:2b:46:48:ec:bd:6c:08:2a:30:
42:49:0d:a8:6c:9a:78:33:16:76:40:15:11:a6:90:a2:12:4c:
52:88:61:fd:6d:27:a5:c5:b3:76:86:9e:9f:0e:2d:fa:8e:ab:
ff:a0:82:67:68:06:0a:d4:d3:f2:7d:02:be:d8:e9:a2:4d:a6:
64:8a:ae:a1:b0:27:9f:50:5e:8b:c0:43:fe:34:c5:23:12:b8:
54:c9:e7:ba:ee:42:05:0a:7d:9c:89:d1:10:eb:0c:93:08:b2:
0e:cd:03:1b:4b:0d:e2:f6:22:14:90:76:3d:cb:95:4c:e4:68:
9c:9f:ab:3c:08:e9:a6:42:49:c9:61:22:ba:fb:6d:89:7c:ab:
29:70:50:ff:3b:22:39:31:1d:6c:1e:a3:fd:7e:0e:4a:47:e5:
07:7e:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:58 2025 by rpki-client