Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.cer (raw, json)
Hash identifier: XX5ORfdeq5O6NraEFvFZpRvLg2dOB1/2axSHqVai1tE=
Subject key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424A22A84F47A42080533DFEB37AF4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 139.20.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a2:2a:84:f4:7a:42:08:05:33:df:eb:37:af:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:49:7e:d8:5c:f7:ef:77:b0:77:d6:ef:7b:
74:d2:aa:95:07:31:b7:5b:cf:ed:a8:a3:81:8c:54:
9c:37:42:9f:e4:e4:cb:b9:8b:da:6f:d9:04:53:0d:
76:2f:5a:69:2d:f4:bd:f3:db:0e:f9:67:b8:03:c3:
39:3c:46:0c:fc:5c:be:bf:fe:79:d2:06:a1:d4:65:
dd:42:75:78:df:67:59:87:ba:9c:bf:1b:c9:65:05:
05:2b:99:5c:80:35:5d:c4:b0:04:9b:92:ad:51:bd:
bf:2b:08:78:e4:8b:27:75:bc:15:68:8a:64:b4:2d:
0d:18:6c:33:5a:3b:7c:c0:84:ed:e7:e2:81:9e:76:
9b:46:ea:fd:aa:b7:ab:ce:e5:78:30:03:9a:bc:b7:
16:2f:2f:f5:46:02:71:57:73:8e:88:87:f5:0c:61:
c4:ab:31:f7:81:0b:43:fb:c8:91:1a:d1:6c:15:45:
39:31:40:68:99:77:bc:0d:d0:2d:be:33:a8:07:dc:
b7:93:70:f1:54:71:ce:e5:f2:e0:fe:7b:a8:b5:94:
e1:4f:78:cb:19:e3:1e:52:db:66:98:f4:8d:8a:b0:
16:52:50:5e:37:f5:d0:59:04:61:db:79:20:43:59:
ce:bc:f9:51:92:48:07:8e:7c:68:63:83:5a:d7:1f:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:8a:c3:f7:1d:05:39:1d:5e:78:5c:0a:bd:63:e5:9a:b5:c4:
02:c9:a6:8c:75:2f:6c:05:f9:5a:2d:6d:b1:c0:b8:6e:e9:ed:
b2:2a:38:51:ff:b6:e9:86:ed:11:9c:d2:4c:89:7a:be:e6:0b:
2e:8f:f3:7e:07:78:88:f2:57:0a:14:17:0a:19:5d:ad:fd:ef:
c6:1f:0d:11:3c:b4:f3:e3:cb:00:9d:e0:bf:29:25:4c:ef:52:
7b:58:94:e6:2e:e7:ae:d5:f9:04:f6:14:c9:d2:d3:75:10:ba:
22:67:f0:f3:a1:86:3b:15:9b:e8:b6:81:1c:ef:4e:bd:48:60:
58:5c:86:6d:b9:59:89:66:b3:97:49:dc:d1:8d:75:bc:9a:37:
b1:2f:90:4e:39:cd:cc:4f:5a:dc:db:51:48:60:71:5d:ad:27:
38:7e:45:be:3b:fe:7d:c0:96:1b:69:83:8e:ce:1e:9b:67:39:
6c:01:a2:80:5e:52:6b:f8:0e:b0:5e:9d:14:1a:67:fd:7b:4c:
9e:55:93:39:88:27:d5:1c:7c:cc:63:25:e1:74:f6:c5:e0:e2:
93:0c:03:e7:ca:38:00:9a:dd:37:f1:fc:e8:cd:51:85:27:86:
ca:f1:bd:6e:02:ba:20:95:19:b0:64:ac:bc:22:80:61:44:0f:
9e:2e:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:58:30 2024 by rpki-client on console-fra.rpki-client.org