Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer (raw, json)
Hash identifier: qt1mKZMLrGcQnjgQiQg5cEU+GiYy8PPGZZy2ANlYXVE=
Subject key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01908A6308456C74DBC5E69B54311DB43DB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 06 Jul 2024 23:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.24.120.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8a:63:08:45:6c:74:db:c5:e6:9b:54:31:1d:b4:3d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 23:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:28:a0:35:4d:b3:1d:78:01:fc:81:0e:d8:
a4:69:82:04:a1:a9:0d:db:2c:12:22:be:09:10:1c:
0a:35:eb:0c:5d:93:d8:b0:ab:05:a3:98:63:ef:60:
23:0f:42:a3:ef:3e:83:96:79:09:71:56:78:20:c7:
bf:0f:f8:85:84:48:bc:14:67:78:38:10:95:9f:7c:
e7:d7:79:3d:73:d7:70:88:57:f9:7c:bc:dd:b8:51:
eb:8b:74:2c:23:30:59:66:49:10:1f:f6:83:19:28:
16:9f:38:cc:ae:dd:0a:88:2b:e0:b2:75:5c:65:eb:
28:27:5c:1a:9d:ed:9c:c9:ea:24:5e:1d:b7:f8:ca:
94:33:1f:6e:34:ca:5d:e9:3f:fd:91:4d:47:c5:03:
43:66:85:aa:63:26:70:22:18:a8:72:59:69:15:36:
c5:67:c1:1a:59:e6:53:e8:27:5b:69:ec:86:67:2f:
a3:c2:0e:aa:1f:13:de:6e:01:26:f3:9e:16:cc:c9:
26:99:72:93:55:3b:4e:5d:db:b9:9f:04:59:20:cc:
54:ae:ff:6f:ef:e4:84:64:dc:db:36:2e:8a:d5:b6:
b3:60:cb:86:b9:e4:7f:e4:13:fa:9e:6b:b4:e2:a6:
b0:2f:49:5c:84:2b:8a:be:6b:05:ca:31:5c:84:90:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:53:f6:56:cd:bc:41:6e:c0:25:00:80:1e:bf:98:eb:49:22:
42:85:e3:8f:a4:8d:79:1a:a4:c9:c9:a7:7d:83:91:46:a3:13:
30:7d:22:97:89:2f:29:70:dd:25:c4:a6:e9:d2:36:90:2a:48:
9a:c0:8e:19:2c:06:d1:61:91:62:55:ce:a0:8f:7e:5b:25:a2:
e0:cc:a3:03:d6:53:1b:bf:64:a9:79:ee:56:6f:ea:04:d3:e1:
82:16:ae:90:17:99:75:47:f7:ff:aa:e4:02:f7:a9:8d:1b:64:
de:43:4b:88:11:82:d0:e5:ae:44:7b:a8:f7:3f:56:12:14:cf:
36:76:ec:d0:13:6e:7a:bf:82:4a:82:87:9f:9b:07:8f:a6:5d:
83:95:97:5b:57:7b:e5:1b:08:6d:20:6d:7f:c3:9b:57:85:4b:
fb:64:53:49:d9:4b:df:6d:30:44:fb:c9:11:39:c9:4a:0b:9c:
db:02:e3:f3:e1:67:05:0e:62:04:7c:c2:f1:be:f7:56:7e:b6:
0f:da:01:4b:d9:3f:f7:0e:fb:da:73:7a:d4:31:5f:ed:07:23:
51:c4:ff:df:8b:10:77:59:65:f3:6e:68:9e:51:74:eb:c9:28:
4d:4b:dc:42:6e:1d:b6:10:06:4c:6f:c8:41:e7:01:6f:8c:f6:
05:f8:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:01:18 2024 by rpki-client on console-ams.rpki-client.org