Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.cer (raw, json)
Hash identifier: HMsGyHya5p29t979VWIeaHYTWfaFyY/m3o1FoW48N/U=
Subject key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B695578B9A5041D07B8F7AFA9024F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208712
IP: 45.87.236.0/22
IP: 2a06:7a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:95:57:8b:9a:50:41:d0:7b:8f:7a:fa:90:24:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:b1:7f:56:8b:07:ed:86:0d:78:1c:6a:f1:
ca:bf:dc:7d:fb:da:7a:2a:04:6e:7c:5a:17:3e:7b:
93:83:86:44:13:e4:d4:21:42:43:cf:9c:3b:75:ae:
c3:2d:21:d7:78:db:47:4d:7c:c2:40:a4:cb:a2:8d:
c4:4f:69:49:04:26:4a:b4:93:a1:a2:a5:ec:59:e9:
27:fe:0b:e0:3f:c6:bd:67:93:4e:ce:74:45:3a:cf:
97:b6:2a:2a:1c:43:85:d7:d9:48:1d:e0:15:e0:0c:
d7:8c:e4:32:db:7c:74:f8:cb:28:25:5f:2b:b9:d3:
41:a6:71:d7:5d:37:98:97:e3:78:23:94:50:51:dd:
91:4c:c8:21:37:46:b0:61:97:99:96:ae:c4:34:4d:
3a:5d:b4:ca:51:c6:ad:01:ec:15:1e:45:a9:64:3b:
fd:ad:e0:9d:c4:e9:58:87:39:a8:86:90:c0:25:95:
a2:f9:fe:4a:e2:fd:bc:a5:02:c0:ae:67:77:e8:1c:
f5:16:b6:a9:b9:22:07:60:0e:20:0c:7e:72:6c:13:
67:43:c2:b7:69:24:72:65:c8:2a:6a:84:0a:76:1e:
42:95:3c:60:a8:e3:e5:f8:d9:97:7a:2b:c9:e9:bb:
d5:5e:df:f5:a5:f0:0a:4f:26:88:98:67:eb:60:31:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.236.0/22
IPv6:
2a06:7a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208712
Signature Algorithm: sha256WithRSAEncryption
29:6f:85:3e:b9:a8:14:f1:5e:86:2d:35:68:98:50:45:e6:00:
2d:6a:33:b4:4d:3c:10:74:37:87:60:1a:40:c9:56:8c:35:dd:
69:cc:41:7c:b3:5f:ab:01:06:89:c3:13:f3:c3:92:cb:74:5f:
56:c0:22:b1:40:ab:f9:dd:97:02:b8:ca:cd:dd:1f:62:95:c1:
e0:92:27:7c:6b:90:5d:19:62:ae:d6:3a:24:46:35:f7:13:d9:
52:06:9b:a2:1c:ff:7f:c8:b0:da:51:24:ba:4f:24:bd:ac:a2:
d8:98:3f:e0:78:78:08:b1:b5:0e:df:57:64:34:31:49:43:07:
e7:0d:c4:a9:ff:55:53:e9:42:03:d2:db:f0:47:a7:26:07:f7:
a5:e1:9c:db:13:ac:04:73:9f:c5:9f:a1:ca:07:99:ce:40:e1:
9d:9e:87:b0:33:1e:a0:b6:72:a8:8c:a2:34:e6:80:8d:88:e2:
59:7f:7d:46:6d:74:3b:6e:d2:34:a9:c6:6d:5c:d2:66:fa:23:
f8:a9:9d:05:21:33:e6:b8:d6:f0:43:e1:4c:e8:23:02:e0:a2:
fd:de:4d:c2:d7:9a:68:2e:e3:68:69:69:ab:1a:48:ef:23:ed:
1e:09:c9:f0:6d:0a:c1:86:bc:8e:6a:31:a9:ef:22:b1:d2:50:
ce:47:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:12:11 2024 by rpki-client on console-ams.rpki-client.org