Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.cer (raw, json)
Hash identifier: 2DXHVRKyJPmMehEeBkmjtkfWsvRHrB0h2F2uXRlFtfo=
Subject key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5BF4BD348E303B8FF5A7C6C899A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48040
AS: 50049
IP: 94.154.40.0 -- 94.154.46.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5b:f4:bd:34:8e:30:3b:8f:f5:a7:c6:c8:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:04:55:1c:2c:37:0e:95:20:92:dd:3f:af:
ce:23:b3:b3:b7:de:dd:f3:59:04:fc:81:1f:53:ea:
99:c1:06:89:f1:6d:48:9a:a1:b1:f8:8a:35:f0:43:
60:f5:6a:16:4e:da:cf:fe:cb:74:1c:5a:94:00:22:
35:9b:96:df:6f:7c:7a:69:3c:f2:73:b8:ea:0d:c9:
c4:16:b3:e2:fe:95:94:47:de:53:63:47:7e:19:8f:
3e:03:d0:a6:cd:8a:10:bf:1f:23:df:9f:1a:0c:e8:
08:d0:17:d9:52:43:9d:c8:8a:91:72:a1:97:bc:80:
66:dc:6f:ad:c3:e9:d4:64:49:60:84:2a:d7:cd:e6:
83:fe:e8:9a:24:26:de:9a:63:7d:65:16:0c:26:f0:
d4:b0:bd:2d:26:75:52:84:7a:5e:4f:9a:7b:1d:4a:
af:1d:21:df:09:ee:28:71:13:6c:7e:ca:ea:e6:5e:
71:02:24:23:19:6e:c2:9f:23:69:4c:c9:4b:35:75:
3e:68:c1:12:61:89:68:77:47:a9:a4:85:14:ac:ac:
bd:5d:e4:ea:8a:23:69:d6:02:45:d0:1a:2c:55:1f:
b1:0e:b6:05:c1:8e:af:7f:63:4b:64:13:b7:03:7d:
8d:42:2a:1d:8e:bf:90:63:50:0f:30:87:ec:fe:5e:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48040
50049
Signature Algorithm: sha256WithRSAEncryption
99:a9:34:22:c4:cb:30:bd:25:68:20:48:d9:33:b1:62:59:b3:
b5:34:dd:7c:bd:5a:10:0f:58:61:e3:39:4f:c6:03:66:01:f4:
a6:8e:11:04:54:59:33:f1:58:7b:04:06:ce:49:9a:68:74:9b:
f3:07:a2:8e:88:be:1b:13:3d:db:17:81:25:ac:3a:93:3c:b1:
05:4b:97:58:e8:11:41:21:62:a7:4f:25:ac:26:81:c6:c8:78:
7e:55:56:04:6b:a0:01:91:75:fb:b7:1a:42:bc:c1:b2:03:4a:
0b:be:97:ff:02:0d:f5:1a:a1:6e:ea:54:2e:3e:ca:cb:2f:5d:
82:da:9b:ee:57:62:d8:0e:a9:f4:53:7c:ef:07:ad:dc:e3:33:
8e:ee:24:1a:93:bd:c3:e3:e2:3c:eb:f2:a8:9a:b9:50:a3:0e:
03:b8:42:bd:e1:d1:ab:f9:d3:08:c7:98:ae:b2:60:6d:99:d8:
a3:f9:65:18:e4:61:bb:5d:07:d7:79:d2:58:71:5e:c1:31:2d:
c7:d3:a5:c6:85:d4:bf:bc:ef:07:f5:58:32:c5:bf:af:25:7d:
15:c5:e5:92:61:e7:8c:d5:1c:bc:44:e0:76:0d:95:02:90:52:
6c:0c:f0:44:20:7e:78:bc:68:bb:f7:95:fa:d2:b3:7c:25:b6:
c3:28:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 19:00:01 2024 by rpki-client on console-fra.rpki-client.org