Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
File: x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer (raw, json)
Hash identifier: WpwZ9c2ZBRo5yYoFZqrNpUKrsaoC4KAck8Kz6QhbAUw=
Subject key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01943C5D7A4879ADA5F9C9DFB2BC5DFA11D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 06 Jan 2025 16:05:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.22.104.0/21
IP: 43.230.84.0/22
IP: 103.49.128.0/22
IP: 2a14:9900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:5d:7a:48:79:ad:a5:f9:c9:df:b2:bc:5d:fa:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 6 16:05:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:9f:1c:34:8e:2a:27:fb:c7:70:ba:b0:0d:
0a:26:4d:d0:3e:48:fa:44:4e:70:cf:73:55:05:6d:
d4:61:cb:46:32:7e:95:eb:e6:fb:4f:93:79:d8:c3:
75:86:b5:6c:9c:67:fa:dd:38:c4:95:84:76:8f:49:
73:de:40:4c:d5:32:ff:dc:f5:40:c5:65:a6:7b:1b:
e9:99:e4:c1:95:d9:72:8c:80:fd:4b:38:95:c9:c3:
8a:c5:b9:78:7b:32:72:a0:b2:c0:07:dd:9a:97:cc:
96:41:a5:73:4c:78:20:3f:52:57:97:76:f0:e7:0f:
99:e6:ac:93:e5:67:cb:95:f1:60:8d:e2:af:19:df:
ba:d1:6b:57:c6:d6:67:81:80:66:43:9f:b6:b6:c1:
c2:e0:bd:62:90:e1:0b:a5:e8:c8:e9:96:3f:1c:e0:
9a:3d:0e:7f:9c:97:17:e2:d4:8c:de:80:e0:0a:8a:
3d:2b:3f:e4:16:77:e5:cb:bf:c2:17:0d:7b:ab:d7:
76:94:2b:9f:df:27:42:fa:b7:33:9b:8f:54:b8:40:
03:2b:2d:fc:dd:d4:65:ef:84:44:6f:ac:7f:c3:d2:
9e:a9:e8:39:38:f7:7f:c3:a2:44:53:a0:f4:7f:2c:
3e:6e:d8:ee:e9:2d:6a:32:a8:a0:b6:1d:e9:9f:48:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/21
43.230.84.0/22
103.49.128.0/22
IPv6:
2a14:9900::/29
Signature Algorithm: sha256WithRSAEncryption
4e:73:be:9e:63:a6:b7:b6:8d:36:f3:76:93:7e:c7:10:2b:1a:
5b:94:8b:e2:c5:28:e2:20:29:c9:1f:31:be:4e:63:c3:fd:2d:
7a:3c:c1:2e:0a:74:e9:1e:99:80:f6:ef:0c:75:1c:2a:e9:f6:
dc:06:c5:3f:69:90:ec:3d:73:90:65:d2:df:56:af:30:90:bd:
b7:d6:c0:39:2f:8f:e4:a4:7b:bc:e8:73:19:ac:66:45:39:ac:
6b:83:20:f8:1b:0a:15:1f:b2:17:db:69:22:91:77:5a:63:5c:
7e:74:dd:00:24:cd:be:ef:74:c2:4e:19:5f:e8:10:47:bc:c4:
81:13:c2:69:c6:44:7c:42:27:ac:cd:71:2b:52:e5:36:28:7b:
17:48:29:89:e2:5f:3f:7f:3e:8a:b6:a7:a0:37:a1:6f:46:04:
68:6e:eb:b3:88:43:19:83:96:27:50:c0:02:03:7b:53:45:94:
a7:a1:44:eb:32:39:fb:f7:e9:e3:fc:7a:8c:ef:f8:a3:12:b0:
80:3f:84:e8:fc:c2:44:d8:a3:d4:7f:74:70:06:c5:27:7a:3e:
fb:e7:9e:cc:5e:d1:3a:bc:87:60:ae:78:db:e0:33:d2:7b:dd:
3d:6a:e1:a5:a0:13:0d:02:f0:4f:c1:58:dd:f3:d7:c7:ba:1d:
f3:d5:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:21 2025 by rpki-client