Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
File: 1-3nCbzFXU0UVnIQO0nioeKklZhU.cer (raw, json)
Hash identifier: vKuMP9ySQ/SjM9/1JF9fk63IhdfONffydep+GrKHvXo=
Subject key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6B08E3E901EFA4D9F5A2B764807B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51430
IP: 31.3.152.0/21
IP: 37.46.112.0/20
IP: 79.142.64.0/20
IP: 91.214.44.0/22
IP: 128.127.104.0/21
IP: 185.2.28.0/22
IP: 185.7.32.0/22
IP: 185.10.56.0/22
IP: 213.5.64.0/21
IP: 2a00:7140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b0:8e:3e:90:1e:fa:4d:9f:5a:2b:76:48:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb79c26f31575345159c840ed278a878a9256615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:40:ac:5e:63:ab:1e:9e:23:f4:ce:c3:c4:
c7:38:ba:b6:0c:78:0d:6e:f4:f3:a9:c8:32:cc:fb:
61:64:66:fe:51:0c:ab:67:7e:83:91:51:8e:cf:6e:
4a:3a:32:0a:f0:01:ed:3a:ef:a3:aa:fe:01:74:18:
7e:21:70:f5:81:57:2c:a1:89:c7:42:72:57:09:60:
b6:32:ad:74:06:fa:72:c8:77:fb:dd:17:91:65:41:
e8:79:2a:c6:d7:55:83:b4:d0:8c:fa:1a:8c:ca:94:
47:cf:f4:ae:42:ba:7e:ea:64:80:63:2a:e1:14:1a:
7a:84:3d:9b:6b:78:e3:e2:94:a0:26:ef:16:2a:61:
53:b9:0b:02:7d:24:23:18:6f:fe:c9:47:a3:ca:cb:
78:21:40:8b:f8:af:94:e7:f9:d6:8b:e6:c3:0e:7e:
c0:8a:34:94:a6:27:59:f8:30:8c:68:d8:cf:7a:e0:
25:e2:d9:84:81:9d:36:44:c3:58:4f:06:37:d2:79:
7f:3a:33:90:50:6c:aa:cc:40:26:4a:b6:8a:12:f3:
2d:b2:f8:2c:d6:38:8b:94:d5:58:0c:9b:8f:b5:75:
7b:32:1a:26:cb:71:13:4f:34:17:39:f2:c2:52:76:
a7:c1:75:20:8e:05:21:53:f7:c2:3c:0c:12:eb:6f:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.152.0/21
37.46.112.0/20
79.142.64.0/20
91.214.44.0/22
128.127.104.0/21
185.2.28.0/22
185.7.32.0/22
185.10.56.0/22
213.5.64.0/21
IPv6:
2a00:7140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51430
Signature Algorithm: sha256WithRSAEncryption
70:40:f3:85:f8:a5:1b:44:c4:98:d4:c4:e0:8f:a6:ab:e3:f4:
5b:ca:23:93:69:a7:27:5b:5f:2f:3f:16:82:88:0a:65:ff:9a:
fe:2c:89:c6:71:27:ff:af:36:7c:bc:d3:12:88:28:3f:17:97:
c7:56:74:f8:23:b2:d9:f8:b3:19:ba:22:f8:1e:33:99:13:c7:
35:ee:5e:e9:e6:47:5d:62:e5:cb:16:f6:e6:7b:3f:2d:d4:ba:
12:fe:0b:98:0e:fc:3d:8b:b6:d4:7b:78:4b:16:ef:5a:94:76:
18:4e:60:1b:36:43:d4:0c:55:58:87:e4:7d:73:83:86:dc:04:
1f:a1:46:e3:a4:9c:bd:a2:9e:01:b1:7f:36:37:0f:4c:b8:6a:
94:6f:ef:18:be:c5:be:3e:9e:16:9f:90:d7:7f:70:ff:8a:4f:
a6:a0:1b:73:5e:82:44:e7:3a:72:20:3c:4f:2c:ca:1a:29:fe:
df:cd:9c:33:8a:db:35:01:4f:b1:d1:34:41:3b:96:07:9d:09:
5c:94:64:78:e3:73:04:f9:86:c7:31:78:fe:70:da:7e:82:cb:
bd:5f:71:df:54:46:ca:99:bb:e4:cd:84:10:8d:e6:ca:b4:cc:
c4:e9:ab:5c:63:a9:d0:85:e2:5d:fc:c4:a3:72:61:4e:e5:ea:
75:39:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:59:46 2024 by rpki-client on console-ams.rpki-client.org