Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
File: 3F-syhTeCBdO9clskfHngl9C0Hs.cer (raw, json)
Hash identifier: +9RhBNUZLn1EowL6E/nmCmAewUYHcDexwj+KWrfJj/4=
Subject key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCD2B06FF2CB89DC215292835EBDB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205330
IP: 37.130.216.0/21
IP: 185.109.56.0/22
IP: 2a0f:cec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d2:b0:6f:f2:cb:89:dc:21:52:92:83:5e:bd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:24:fa:cb:07:9b:84:c1:3f:ae:37:cf:7e:
17:02:9b:34:3e:18:b8:03:2e:a5:ae:36:fb:44:b0:
7f:ec:b2:1f:32:bc:77:8f:7a:43:30:f4:a2:09:54:
b6:a6:d0:bc:fb:f6:cd:e9:1e:69:53:1b:7c:09:f6:
04:8d:b3:2f:99:ab:c9:b4:03:da:5e:fd:c4:4d:b6:
d2:c3:d4:c4:85:09:c0:d7:d9:98:a7:55:99:b5:a8:
7b:16:1e:cd:03:a2:94:d6:1a:25:82:5f:28:fe:fd:
59:5b:0d:b4:23:d8:db:5d:bc:10:79:0a:85:50:29:
38:4c:8e:14:a1:66:34:54:8b:bd:1f:28:91:a2:97:
e1:8e:96:0f:07:87:ea:7e:32:c2:5c:d2:24:a3:c0:
c6:e6:44:a6:5b:a5:fb:a9:4a:92:82:45:c6:c4:dd:
fa:42:60:d5:66:0b:65:02:96:a3:07:86:f6:ec:f1:
36:fb:8d:9e:27:33:9c:ce:7e:88:eb:67:4d:dc:56:
9b:88:60:fd:52:66:19:cd:bc:ce:e0:b6:10:21:e2:
51:36:e0:45:ab:5e:1a:17:a0:d6:e0:f1:c3:a3:a9:
86:53:c6:97:01:d6:e9:ec:a8:cf:2f:93:93:73:80:
a2:85:82:bd:c3:52:52:32:20:09:7f:15:40:d8:d6:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.216.0/21
185.109.56.0/22
IPv6:
2a0f:cec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205330
Signature Algorithm: sha256WithRSAEncryption
a5:3c:7f:5c:49:d8:ad:20:86:e6:0e:2c:ea:60:b6:1f:98:f8:
fe:93:fb:d2:29:70:d8:99:c5:16:05:b6:3c:24:bf:c3:23:76:
70:b8:11:4a:3a:87:6c:43:8a:95:f8:74:18:b3:d8:37:49:6f:
ad:fd:31:99:fe:fe:aa:aa:2c:7c:b1:2a:60:e6:a2:96:db:20:
02:91:d5:a3:94:77:26:a5:51:99:c1:01:50:e2:92:8c:13:e8:
c0:f0:14:f7:26:b1:ef:3d:60:3e:28:db:93:a6:2f:ab:a3:f3:
ba:8c:0e:15:c2:54:04:5b:22:7b:29:cf:6b:c6:ff:d5:bc:e9:
33:99:7e:01:15:c6:45:18:bb:e9:89:3a:35:c1:ed:f9:e8:2a:
5c:aa:ce:3a:20:74:7e:72:f4:f3:10:22:0f:39:b4:b7:bf:b5:
05:5b:59:e1:0f:d1:54:a8:92:16:11:c2:a2:f7:81:ac:85:93:
12:d3:bf:25:f9:d0:8e:e6:94:71:ef:49:63:17:17:4d:33:cc:
a4:1e:e0:a8:48:8a:6c:f1:78:7d:0e:b3:18:15:03:b0:d6:75:
51:b5:bf:c3:10:c8:1c:bc:e7:9a:98:ce:8a:bb:d3:94:c0:8e:
e5:61:21:e6:e3:f9:73:ed:bb:c0:95:b1:74:7e:e8:96:ec:5d:
88:aa:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:56 2024 by rpki-client on console-fra.rpki-client.org