Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.cer (raw, json)
Hash identifier: yDs/EpqRS6mgzOS4p0w8Fsy+jfPdSFhcBoGUrMUbZb4=
Subject key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5F5B3E9F01E60DC9E97DA43E162C6447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 11:50:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.5.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:5b:3e:9f:01:e6:0d:c9:e9:7d:a4:3e:16:2c:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 11:50:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:92:8f:f4:8f:d9:b3:a0:b0:ba:fe:4e:6e:
78:8d:e8:94:79:ae:cc:b9:cc:71:5c:53:44:58:0b:
1c:3f:c0:93:e1:13:14:07:9c:0d:56:00:7c:3f:46:
fb:0f:c6:6c:46:6d:0e:a5:91:0b:fb:f2:84:dd:0c:
5a:ad:05:c1:da:a4:d0:1c:61:ff:b4:da:64:db:b5:
65:62:ba:dd:f5:68:5c:25:7e:37:12:89:28:df:f6:
a0:d2:b9:d2:f4:01:fe:5e:70:8a:5d:1e:5d:06:92:
1a:6e:ec:29:5e:90:a3:bc:6c:8c:55:2b:14:b2:24:
ca:c2:b4:10:a5:bc:25:22:21:70:70:d5:4e:90:57:
23:fa:8d:d9:b5:52:bf:09:12:79:3a:41:dc:2d:f9:
cc:10:56:17:db:02:69:99:27:50:b5:12:ba:d8:6b:
91:cc:30:98:38:20:38:e7:a3:2e:c0:4e:86:55:30:
08:8e:08:15:b5:0f:64:6f:dd:f8:04:2a:15:00:17:
2e:de:5c:52:1b:3b:ab:fd:d1:ab:c2:bb:d1:e8:c2:
2c:a0:70:d2:1d:16:13:3f:1f:2d:b6:b2:22:bc:65:
d6:47:50:27:fb:d5:b9:c8:e7:76:65:76:04:b1:7d:
70:7d:ca:e0:1d:1c:88:dd:4b:db:c0:96:4b:59:a0:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.50.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4f:80:e1:18:fb:0d:7e:40:d6:e9:eb:88:98:e4:be:5a:12:
b0:2b:9c:81:ad:de:cc:82:de:27:e7:21:c9:8c:d0:46:26:e6:
bb:23:87:c2:06:48:a3:09:9c:b5:e0:2f:c0:29:d4:f1:1c:19:
ff:11:7d:ba:fb:6c:62:5d:27:11:81:52:19:87:46:e9:37:4f:
c8:90:6d:a8:ce:ca:08:85:b0:4d:d6:5f:42:6f:bc:33:4a:9c:
ee:0e:ff:85:29:22:33:3c:8e:0d:9d:51:1d:5d:6c:f2:6c:58:
6d:2e:d2:a0:74:79:d6:0b:5b:69:07:07:29:da:fd:84:a8:a3:
1f:a8:40:33:6b:91:3e:cc:7c:e9:0c:d1:1a:47:a0:17:19:ed:
d6:73:1a:20:6e:36:df:3b:fd:8c:1b:67:ee:10:aa:3b:7b:95:
d4:43:d8:21:ba:a5:49:2a:eb:66:71:a4:10:b9:10:71:ca:56:
1c:96:23:33:e0:3f:e6:ff:9f:dc:a4:2c:4c:08:5e:8b:53:aa:
dd:04:72:01:de:1d:f8:7d:e2:58:9a:4e:50:fb:ef:8f:fa:e2:
b6:f5:3d:d6:06:c3:55:5a:fe:b8:04:b9:e6:53:4f:df:91:4c:
a4:ce:41:03:cb:4b:d5:38:02:18:05:f5:8c:93:00:4b:a7:55:
c7:b6:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:49:50 2024 by rpki-client on console-fra.rpki-client.org