Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.cer (raw, json)
Hash identifier: vBtCzCja4zJMz6WZJ0BCtqPvA1wzJzq1z9E79y0cgSI=
Subject key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5006F47C2FEB07ABB57F98B39CB641E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212020
IP: 185.232.96.0/24
IP: 2a10:d280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6f:47:c2:fe:b0:7a:bb:57:f9:8b:39:cb:64:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:2f:0f:af:91:40:3f:ee:8a:33:7b:4f:c2:
59:cc:df:95:6c:c4:08:21:6d:47:a1:f8:35:b5:c9:
c5:f6:71:0f:4b:61:b7:e8:cf:04:8e:fa:b4:5b:e7:
de:ae:16:de:08:14:26:f0:b0:69:5e:42:81:ef:a6:
76:66:a8:e5:eb:7a:99:c0:f2:ed:02:4c:4e:94:9d:
cf:eb:fd:86:95:86:2e:82:96:f2:27:7f:40:e2:41:
e1:ed:02:3a:a9:20:eb:d5:89:72:ae:86:2e:2e:c7:
25:4e:e7:a4:c6:7b:a9:9c:de:d6:e9:07:25:b4:78:
91:72:04:ed:17:61:5f:8d:80:31:e7:a3:23:70:a5:
a9:87:de:fe:4f:4c:fa:8e:03:c5:10:75:65:9f:6a:
fa:e1:ac:27:97:fd:c8:60:68:3a:23:2f:97:4f:f1:
24:6b:2d:12:7a:49:84:01:04:0b:b3:5a:26:61:67:
33:62:61:2b:a5:9b:19:27:52:ae:f2:90:f8:db:39:
ab:4d:db:00:dd:8f:a1:89:c3:8e:5b:27:b4:c1:13:
39:cd:4b:f3:4d:09:b0:c5:b0:de:f8:44:83:20:e5:
8c:97:d6:5e:02:9a:8a:30:b5:db:50:83:8b:d3:18:
a8:32:18:da:f7:2c:59:c8:c1:b2:df:f8:5d:86:39:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.96.0/24
IPv6:
2a10:d280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212020
Signature Algorithm: sha256WithRSAEncryption
80:43:8b:f4:f8:6e:57:83:ad:b5:fc:9e:66:da:91:b4:3f:dd:
33:d3:b8:85:6b:e8:e7:4d:ee:29:a2:ce:a5:71:94:78:c2:97:
d8:ec:df:ae:88:f6:a9:b4:1e:20:c0:22:0c:61:e2:0b:1a:93:
e2:65:dc:0a:13:1e:80:66:16:b5:55:43:d5:39:93:09:1c:00:
91:d9:4e:a4:fb:d0:e4:d0:06:06:d7:82:25:ae:37:2f:51:fa:
66:51:96:39:54:f5:2f:8b:ad:80:0f:b3:7e:e6:06:7e:cb:a5:
71:24:15:4d:f0:ff:0d:09:9e:65:e6:36:50:dd:ca:d6:4d:6e:
06:d6:fa:db:0c:1e:bd:e2:d5:0a:f7:51:cb:c5:68:ec:eb:3c:
4c:b1:00:a9:c5:f3:d9:b9:07:b2:46:b1:95:66:3d:f0:b4:36:
02:b2:a0:18:84:d0:70:86:1e:0e:32:d4:7c:55:d3:de:c2:79:
90:76:be:17:53:46:ad:e6:fe:7d:89:a2:7c:94:29:4e:b4:fb:
c7:73:ab:a0:b2:52:aa:74:f8:a9:fa:fc:c6:6c:bb:5c:d7:6e:
68:c5:2b:76:49:22:9b:a9:a3:9e:17:b5:c2:27:6a:f4:e6:4b:
46:77:16:b5:af:ed:fe:9c:d3:76:2e:a9:37:ca:98:ec:b6:24:
c8:aa:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:45:28 2024 by rpki-client on console-ams.rpki-client.org