Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer
File: 3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer (raw, json)
Hash identifier: Gvv23fGXceY/3BlBqwJ88pSwXB8NQrwcbTCqvW+nc7Q=
Subject key identifier: DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8702DD055348BB555EEE29C4D02EBD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206858
IP: 193.228.143.0/24
IP: 2a10:11c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2d:d0:55:34:8b:b5:55:ee:e2:9c:4d:02:eb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd4bdcd28c8735098199aec093ca897c077d7c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:26:0a:32:5b:c6:db:c4:a7:72:ef:18:12:
74:50:39:4d:f0:ca:b3:55:04:16:d3:60:c5:c5:64:
22:83:5b:1f:d4:89:46:6d:41:33:a4:fb:31:ca:d5:
16:00:70:85:a2:ed:12:ce:e8:b3:e3:0c:1e:fe:30:
78:63:41:64:91:2c:d9:b2:bc:2c:ee:67:38:eb:87:
8a:75:98:15:f5:1b:a8:67:db:80:e6:c7:db:f0:ab:
68:18:4e:e5:1e:a7:13:ed:8c:8e:f6:ec:c5:9c:94:
d1:d0:5f:c9:7e:7c:62:8d:e5:f7:13:dc:54:4b:17:
8e:68:5b:21:54:6d:b2:54:55:d7:6b:aa:c8:4d:bd:
ea:69:45:73:49:32:67:ff:5a:d7:b6:d5:3c:9c:64:
d8:b9:b7:be:6c:31:15:bb:77:6e:86:37:9f:6e:e6:
28:d7:5b:cf:82:12:6d:ba:7a:52:fb:21:ac:f9:b1:
36:80:8b:65:1b:ce:ff:40:1a:aa:fa:10:f4:92:43:
f5:c0:a9:7c:48:e4:47:72:d2:d2:67:d0:18:55:bb:
29:fc:bc:aa:7d:5c:c6:fc:22:fe:58:9b:5f:8d:51:
80:bc:50:84:a8:4d:9f:9a:a9:33:d9:bf:6e:8d:2a:
78:93:52:00:af:4a:55:ab:e2:04:64:3d:f8:63:cd:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.143.0/24
IPv6:
2a10:11c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206858
Signature Algorithm: sha256WithRSAEncryption
9b:26:5e:42:76:75:29:87:6b:ca:94:49:e9:7c:bb:60:b9:d1:
ef:8b:fe:d2:0b:4f:34:82:9b:93:20:10:b8:24:86:2d:09:44:
ea:91:77:2a:d2:34:fd:2e:e9:b6:98:9d:92:63:b3:14:e8:27:
ad:4d:ea:9d:cb:39:5d:33:a8:b1:6c:70:87:21:9c:92:7a:b7:
c3:2b:c7:02:d5:39:9a:31:87:a3:b0:85:ae:8f:bd:f0:2c:63:
c8:f6:18:86:bf:2e:f8:c3:e7:b7:5e:be:97:3b:4f:e6:46:87:
7f:4c:a3:92:5f:bb:b6:ee:9f:0a:3a:b6:9b:9b:1c:f1:ad:b5:
9d:98:52:d1:d3:72:1b:1e:80:e2:64:4e:20:37:46:85:4c:00:
4a:3a:50:54:b3:45:e7:e7:56:1e:fc:f0:ba:f3:aa:ed:4e:79:
bc:9c:4c:b2:a5:54:de:97:c1:b8:e9:eb:27:9f:8b:a3:62:46:
85:ba:f2:5a:cd:61:67:c5:64:06:a1:6d:40:81:67:9a:27:16:
fb:5f:38:19:f9:53:27:4e:e1:f9:6a:0f:07:18:89:a2:dc:5c:
94:be:4d:8b:b2:7d:24:1f:fa:38:f7:d3:47:5b:a4:1a:61:87:
87:17:4c:4d:9a:1b:e3:06:d8:5e:59:37:91:92:c8:21:d0:ac:
e1:20:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 08:45:51 2024 by rpki-client on console-fra.rpki-client.org