Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
File: 3-xclF0DU12WcwlREFRrHJjmGGA.cer (raw, json)
Hash identifier: 7R56flf6CQ00a4Ffc+bfRRXQnOsBj33TTplzzLzK7aE=
Subject key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3495A5CBB38A07B6F421EC6DCE69FD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197799
IP: 31.193.200.0/21
IP: 2a03:1e40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5a:5c:bb:38:a0:7b:6f:42:1e:c6:dc:e6:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfec5c945d03535d9673095110546b1c98e61860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:89:5c:87:26:f0:ec:7a:8a:d1:af:aa:c8:
c0:17:a8:69:46:fb:5a:01:89:9f:ce:ab:02:42:2f:
30:5b:d2:5f:58:fa:f8:65:e5:43:03:d6:b0:df:54:
e1:33:aa:b8:74:ce:d5:14:45:a9:5d:9e:fc:6d:28:
19:98:e1:07:62:60:c1:52:64:b6:8c:97:23:35:26:
35:51:14:36:62:ac:0a:1c:cc:14:48:8f:0c:c1:9e:
6d:c1:00:e3:ff:94:83:a9:af:44:e9:cb:c4:60:be:
22:ce:e1:43:b5:e9:a9:31:a9:0f:2a:0f:5d:7d:7f:
21:12:68:cf:38:4e:e4:df:dc:87:9a:a7:ac:6f:3b:
fb:5d:02:1b:31:a0:bf:43:f6:97:e8:ed:1f:a5:7e:
fa:6c:64:f6:5e:47:14:88:38:56:d6:b0:92:bd:1c:
b4:9d:20:71:0a:65:c6:51:53:cb:ce:8f:07:67:65:
a5:34:75:c4:c9:3e:0c:da:cc:dc:aa:bb:f2:23:f3:
1a:5a:b4:42:fc:e6:af:7a:2c:78:c8:f6:5f:1e:76:
ad:64:c8:9e:0e:98:f3:1e:f7:54:92:fa:f6:b5:05:
04:96:81:67:07:fa:7e:d0:bf:1e:23:81:b0:d1:9f:
10:3b:86:b4:fb:38:80:2f:e2:d0:6b:27:77:ed:37:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.200.0/21
IPv6:
2a03:1e40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197799
Signature Algorithm: sha256WithRSAEncryption
1b:68:21:e4:7c:36:57:93:23:b7:8e:cf:30:e9:bd:b5:ee:72:
91:f9:ad:92:f6:5e:2a:52:94:ce:af:e5:eb:8c:7f:cc:76:1c:
a7:fd:bf:a6:c7:6c:e1:87:c1:ab:e1:8d:50:d3:f1:fe:3b:d2:
82:86:51:ea:2c:b8:92:67:f0:57:c0:14:5a:55:67:1f:06:62:
20:d1:ee:69:f7:ca:26:19:2c:21:c7:26:74:96:91:d6:40:6e:
3b:c4:d4:27:aa:a1:c1:a4:28:30:79:de:88:51:2c:59:4e:6e:
01:09:47:a4:57:1b:69:96:57:c0:12:a4:19:30:f6:9c:75:17:
18:2b:23:fe:fc:b9:52:cd:f8:71:61:ca:05:84:94:24:f7:ef:
ca:95:74:fa:2f:b7:25:d5:ca:32:97:c9:29:26:ad:ff:9c:dc:
09:8c:be:4e:ca:e1:76:66:b8:c6:ac:75:c1:ea:c7:ab:07:e8:
15:db:cf:ad:dd:83:a2:7d:14:f0:e3:a8:6b:19:7f:e0:81:17:
fb:50:a5:33:92:09:3f:bf:5b:db:59:10:4d:84:7a:75:fe:54:
9a:51:60:e4:98:b1:91:b4:1c:76:47:ab:5c:34:16:96:7b:a1:
32:42:4d:50:59:7c:a6:e1:30:60:00:3f:6b:b6:a2:0b:b1:9d:
99:4e:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:56:51 2024 by rpki-client on console-fra.rpki-client.org