Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
File: 3KCtsai3lwIPDseimptautQLZT4.cer (raw, json)
Hash identifier: blG54BJmObs2AG8sdizIsE+ob6DsOb1kLMVPjGNdWMk=
Subject key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B41356B75D4F902301CAC407E4CCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215838
IP: 185.186.24.0/22
IP: 2a0b:6c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:41:35:6b:75:d4:f9:02:30:1c:ac:40:7e:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:84:7b:50:22:f1:69:9f:9e:9b:c4:8e:57:
b7:9e:e1:17:a1:90:d8:29:76:e9:47:22:84:e3:a0:
99:39:18:ac:ab:4b:91:6f:a4:fa:b3:0f:e7:68:ad:
10:c2:9f:40:94:69:b5:27:04:f5:35:46:41:e0:5c:
9e:29:0c:a9:d2:29:84:34:61:6b:53:0a:11:3f:27:
27:dd:78:52:22:8d:3b:aa:8e:53:1a:84:d7:3e:08:
47:d3:8a:bf:fb:5b:95:6a:0e:f9:a5:ce:6d:1e:0d:
f3:37:21:0e:38:91:39:76:d4:c1:49:04:69:d5:63:
c5:70:fd:0b:f1:29:c0:da:16:df:2a:2b:61:3f:ed:
e6:c1:c3:ee:3b:01:e2:68:7a:82:c7:ce:7b:bc:a1:
20:a6:d5:e5:32:bf:e0:c9:08:f1:ef:70:c8:55:2c:
54:85:25:82:e2:91:cb:eb:07:43:cd:90:c8:b7:4d:
8c:67:aa:21:1d:d6:fc:25:50:d2:b5:56:ba:fa:51:
26:6c:c7:a9:31:6d:50:e6:08:8b:ca:ec:70:cf:29:
dc:48:09:f9:8c:e2:3f:0f:09:02:b5:76:64:fb:49:
6a:67:b3:09:b8:49:a7:4a:59:20:5b:87:d3:a4:c7:
9d:5f:58:94:8e:d8:13:e0:f5:51:84:0d:d4:43:95:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.24.0/22
IPv6:
2a0b:6c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215838
Signature Algorithm: sha256WithRSAEncryption
31:75:14:0b:5e:0b:dd:87:4e:d0:cc:a3:16:9c:c1:7b:f7:4a:
bd:d6:49:5c:59:c3:9c:ae:22:31:24:06:34:62:d3:e4:7a:80:
14:20:23:15:dc:94:ca:9a:9e:eb:f4:a6:58:3c:2f:5b:65:a9:
aa:07:65:5e:28:c3:a7:4f:8b:85:0d:4e:55:40:b5:8a:ea:7a:
2c:ed:89:02:0e:3a:f9:3b:c2:9c:e8:cf:de:c5:17:50:9f:c4:
8e:d3:77:cc:f2:ef:a0:9f:34:b8:7c:1d:73:b5:23:91:d2:e5:
b2:fe:ba:db:f7:96:87:17:6e:02:37:5d:6e:fa:4f:89:ea:66:
c8:80:1c:be:85:13:a0:fb:eb:a7:aa:df:be:9b:08:81:df:c2:
a4:20:e6:cf:53:0f:54:22:85:26:bd:ee:e2:80:81:e9:a9:b5:
69:88:4f:ce:78:22:81:f9:6e:2c:93:1b:94:93:79:95:67:b5:
48:4d:7d:95:72:24:2e:cb:bf:c7:f9:95:bc:67:0d:d8:02:44:
2e:f7:d9:65:5d:e8:16:e8:e6:e7:2b:9b:1a:17:0a:c1:59:b9:
9d:98:9f:de:d1:52:2d:68:f7:c5:d8:82:9e:54:9f:b3:ff:13:
eb:f2:fc:e7:66:ca:d2:00:13:15:e4:eb:30:bd:ae:5f:d1:29:
d2:d1:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:30:48 2024 by rpki-client on console-ams.rpki-client.org