Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.cer (raw, json)
Hash identifier: flSwmTUvfO+U8CE7sy6s304FZvPFC0lkawx77/8ueHY=
Subject key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FBAA2D9FC02BF54CD1E96276D2F1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208309
IP: 91.231.34.0/24
IP: 2a12:88c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:a2:d9:fc:02:bf:54:cd:1e:96:27:6d:2f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:80:a4:ac:d9:9d:c3:26:19:57:40:87:04:
12:31:35:73:8c:ef:ab:21:a6:0c:f9:cf:e9:66:a6:
a5:53:84:d8:73:c6:d6:c8:10:20:51:7e:f3:da:fb:
27:23:ac:83:71:30:1c:15:61:b7:d6:59:92:ba:34:
27:ff:00:9c:34:c3:d6:b4:5f:69:72:b7:a0:37:90:
31:e2:14:df:6d:94:0b:2c:2c:52:69:6f:9d:dd:e9:
e2:b0:bc:fb:f9:3b:df:21:8a:6b:5b:8c:e9:69:1c:
27:b8:fd:75:34:7f:ca:d1:74:c0:ef:67:d7:77:38:
84:51:2f:4b:5e:67:f2:fc:85:1e:e3:64:c6:66:be:
e8:bf:da:57:ed:55:01:70:9b:02:8e:db:b6:52:4c:
45:99:f8:38:ee:1a:ab:df:13:fd:fe:f9:df:d5:17:
08:3e:41:f0:fc:73:ab:be:0a:de:5a:64:5d:a0:01:
0d:8a:2f:a1:5e:f0:e3:3c:76:d3:f2:a9:88:92:8d:
d7:d0:2b:e8:a3:d9:ac:4d:ba:92:6a:06:c4:43:d3:
f2:4a:28:c2:fd:16:75:bd:dd:18:84:ff:2b:71:a4:
68:bf:66:1b:b8:eb:c9:6d:55:19:f2:f2:4c:57:b4:
fd:86:70:25:10:2e:f3:3d:d9:2e:21:d7:93:f9:b6:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.34.0/24
IPv6:
2a12:88c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208309
Signature Algorithm: sha256WithRSAEncryption
2d:ec:11:cc:e0:b0:32:a3:ab:ae:99:94:af:4e:f3:07:82:14:
7f:f5:2a:87:6d:21:28:c2:1d:3f:96:69:db:29:b2:1a:f8:b2:
39:0f:2a:66:da:47:e5:1a:b3:e6:eb:3c:1b:94:ce:b8:bd:cb:
42:d9:9f:19:75:15:6d:1c:5d:dc:86:0e:ab:ff:6b:e8:16:ca:
73:5d:88:5f:eb:f3:fb:70:8b:b6:5b:6d:9e:0f:3f:66:96:d5:
a2:f6:52:c8:e6:26:f1:1f:b2:72:32:6a:ea:2c:07:59:cc:42:
f3:20:1d:97:2e:af:7c:5e:d1:e7:6d:b8:0f:7d:d5:e8:cf:2c:
89:10:8f:1d:b3:e5:b3:89:d4:32:7c:54:ca:db:8c:8b:2a:76:
1e:94:30:0c:2d:b0:a5:f6:9f:ad:38:cd:6f:b7:62:bd:9b:0b:
6d:d5:85:45:57:68:d4:c5:5d:49:e0:d0:f0:f7:be:30:d1:ed:
6c:53:25:af:bf:89:74:76:e5:a4:49:6a:d5:0d:7f:0d:50:b8:
8e:d2:4f:0a:6a:4f:5c:76:e6:b6:19:e7:e1:8a:24:37:f7:bc:
fe:4e:7f:bd:c9:f3:05:dc:d2:a3:cc:d6:d1:61:ad:b7:07:61:
5f:e5:89:a2:32:d6:cf:f9:ce:89:2b:16:98:52:bb:a3:47:d7:
b3:b8:ed:fe
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlj7qi2fwCv1TNHpYnbS8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjdhZTM2NjlmODQ3ZmEyN2E2OWIxNGJiODdmOGM3YmZkNzk5ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2yApKzZncMmGVdAhwQSMTVzjO+r
IaYM+c/pZqalU4TYc8bWyBAgUX7z2vsnI6yDcTAcFWG31lmSujQn/wCcNMPWtF9p
cregN5Ax4hTfbZQLLCxSaW+d3enisLz7+TvfIYprW4zpaRwnuP11NH/K0XTA72fX
dziEUS9LXmfy/IUe42TGZr7ov9pX7VUBcJsCjtu2UkxFmfg47hqr3xP9/vnf1RcI
PkHw/HOrvgreWmRdoAENii+hXvDjPHbT8qmIko3X0Cvoo9msTbqSagbEQ9PySijC
/RZ1vd0YhP8rcaRov2YbuOvJbVUZ8vJMV7T9hnAlEC7zPdkuIdeT+bZmAwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFL9642afhH+iemmxS7h/jHv9eZ7gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzM0OTNm
Ni05NjM2LTRmYTMtYmU1Ni1kYjgwMzA4NzlmNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMzQ5M2Y2
LTk2MzYtNGZhMy1iZTU2LWRiODAzMDg3OWY1MS8xL3YzcmpacC1FZjZKNmFiRkx1
SC1NZV8xNW51QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW+ciMA0EAgACMAcDBQMqEojAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMttTANBgkqhkiG9w0BAQsFAAOCAQEALewRzOCwMqOr
rpmUr07zB4IUf/Uqh20hKMIdP5Zp2ymyGviyOQ8qZtpH5Rqz5us8G5TOuL3LQtmf
GXUVbRxd3IYOq/9r6BbKc12IX+vz+3CLtlttng8/ZpbVovZSyOYm8R+ycjJq6iwH
WcxC8yAdly6vfF7R5224D33V6M8siRCPHbPls4nUMnxUytuMiyp2HpQwDC2wpfaf
rTjNb7divZsLbdWFRVdo1MVdSeDQ8Pe+MNHtbFMlr7+JdHblpElq1Q1/DVC4jtJP
CmpPXHbmthnn4YokN/e8/k5/vcnzBdzSo8zW0WGttwdhX+WJojLWz/nOiSsWmFK7
o0fXs7jt/g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:09 2025 by rpki-client