Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.cer (raw, json)
Hash identifier: D7fym3AO9KsOmHUdhYiNVOCaj2fmUtenqeTJiBUa9y0=
Subject key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B924CB46037F24707D346055BFFAC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.40.64.0/22
IP: 2a04:82c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:24:cb:46:03:7f:24:70:7d:34:60:55:bf:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:c9:b2:ff:a5:b1:30:e2:7c:fd:ff:e5:0f:
c9:eb:57:66:cc:48:16:c5:e1:aa:ee:85:17:2e:c3:
d0:1d:05:31:26:bf:73:58:34:a6:bb:57:04:49:d7:
0f:a0:2c:e1:df:6f:32:35:55:d8:e3:01:5e:99:0a:
79:a9:55:bf:5e:9a:7c:40:80:ee:61:6f:32:3a:26:
c7:39:16:84:94:8e:c5:43:06:c4:59:33:9e:76:54:
a4:6e:d6:1e:a7:e4:51:5d:c6:22:f6:0a:fe:42:75:
d9:27:6c:f3:a0:6b:36:83:35:25:57:04:0b:65:99:
8d:7c:e2:5a:07:c0:5f:89:14:94:ff:b3:e7:5a:8d:
80:49:9c:2c:2e:08:72:d7:1d:cd:36:c5:2f:6f:ef:
2a:10:99:b8:45:17:f4:f6:03:93:cc:d3:9d:77:53:
ca:2a:a5:43:25:d9:f0:48:5d:da:83:6d:33:c6:0d:
e3:29:e3:d8:6d:8b:26:4f:ce:06:ee:19:e7:1b:d4:
c9:ef:f9:78:1f:a6:91:b7:b3:9b:cb:28:f1:81:46:
c1:81:44:61:fa:73:db:48:7c:45:38:19:c4:9d:ef:
9d:0c:5c:d7:dd:f0:9c:b7:a7:cb:1e:55:6e:5a:f7:
03:67:72:33:5f:a9:ea:e6:5b:6f:4c:42:6c:72:d7:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.64.0/22
IPv6:
2a04:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:72:0c:27:59:47:22:f7:35:0e:fc:b8:98:b3:63:54:e2:77:
eb:73:fa:2e:34:9f:b7:0a:19:2a:82:20:de:57:3c:92:63:0e:
6d:fa:94:7d:49:17:a5:9f:b3:1e:85:75:8e:42:7e:f4:3a:86:
c9:c1:7a:51:9d:14:97:58:5f:16:7e:79:37:f8:37:9e:95:a2:
36:50:b5:53:c9:49:f3:10:a7:53:33:01:cf:c1:5a:09:20:02:
65:2e:2f:ca:fe:6e:4b:0e:7f:c5:fd:7f:21:8c:41:ff:7a:27:
57:7d:e3:ec:0f:1d:76:28:ab:8e:ff:3b:4d:6d:4d:f1:38:46:
12:56:1a:27:1f:5a:18:e5:91:9d:b6:6a:29:d1:2e:ce:00:7d:
2c:36:1f:d5:83:ea:4c:11:5c:6c:cf:7e:02:70:cb:7b:95:57:
89:17:39:ac:eb:62:b9:3b:ae:9d:f0:a1:3d:74:50:08:53:20:
a9:1b:3b:c7:af:71:29:61:c0:35:70:83:43:e5:76:d6:58:83:
a8:21:7b:d7:e3:70:e0:01:19:c3:9a:7b:71:16:8a:17:31:8e:
86:20:15:f3:08:6e:7a:54:2f:84:64:b6:20:07:5e:50:89:6d:
48:a2:3b:bd:e5:5b:55:9d:42:e2:de:79:4e:20:77:da:e2:ed:
53:26:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:51:16 2024 by rpki-client on console-fra.rpki-client.org