Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.cer (raw, json)
Hash identifier: 5tNWcJa1ftnCCJnWzhMhdlltqVRQ4x4wE8fpgNoi2ZE=
Subject key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D4013189CB9C7E041FA41059C92BCD474
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jan 2024 10:03:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.107.247.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:13:18:9c:b9:c7:e0:41:fa:41:05:9c:92:bc:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 10:03:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:7a:b3:df:3e:f9:84:b2:01:85:c0:a7:15:
59:02:65:19:86:25:72:b8:7d:cb:7c:02:2e:1c:37:
10:3d:ab:f2:b8:9a:6d:15:d1:7a:e0:98:d5:64:e9:
c9:ae:9f:d7:56:86:f4:9b:f6:04:b8:3d:db:20:3f:
82:28:f5:bf:c8:5d:a3:c5:e6:a5:2b:31:c5:e3:0c:
31:40:a4:61:ce:b7:a0:08:82:c9:5a:20:94:f3:54:
a6:dc:bf:7b:67:9d:33:22:06:73:d7:7b:92:1c:af:
64:24:0f:a0:d7:e2:df:b2:4b:77:c3:fa:ad:4b:6c:
81:e0:66:56:1e:10:74:02:9e:3d:50:0a:f5:45:92:
da:60:07:64:c0:a3:86:54:84:be:af:d3:ba:d0:5d:
e2:61:f2:9a:cc:8a:88:a9:e8:43:8c:72:a7:de:89:
0f:55:8c:b0:89:8b:98:46:2a:00:a1:e4:fe:07:ec:
7e:c2:f7:37:d9:fa:30:7f:38:a2:a2:0c:67:28:a0:
48:11:de:ec:7f:0e:ae:6a:82:ce:5d:d1:8e:af:01:
9b:de:c8:9e:89:0d:af:f6:b1:7f:34:bc:27:0c:41:
4a:37:19:6e:a9:4a:08:e5:c5:bb:53:b0:c9:23:44:
3f:52:45:d4:fe:e2:2b:e3:1a:40:01:33:0d:65:cc:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.247.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a3:9f:fe:5c:80:6f:cc:d4:47:72:21:ff:81:9b:bb:01:8e:
ea:33:90:2d:26:91:c3:1b:e9:55:49:07:e3:82:86:dd:07:4a:
14:87:9b:e4:63:16:5f:ef:fd:90:c5:a6:7a:4e:ea:9a:81:ac:
73:76:40:ba:19:4d:97:d7:00:73:7d:88:6f:31:69:c1:0c:f5:
26:4a:3b:77:84:6d:00:3b:b7:55:4e:8d:19:19:8d:fe:f6:52:
ae:da:9d:98:df:ad:95:f8:46:09:08:6d:04:04:fe:97:fc:a3:
f6:05:31:61:63:1b:df:06:73:3d:57:5d:48:1b:6e:a2:bc:91:
77:4e:a0:67:40:08:23:d1:bc:22:0d:91:e2:e9:95:35:94:24:
14:b8:49:e7:eb:73:6f:d4:4e:c8:49:7d:6c:d9:5c:ba:e4:1a:
c5:f3:e8:1a:8a:bd:18:97:96:37:84:97:3c:bd:2a:4e:c7:52:
6a:40:30:89:67:bc:c6:67:f9:36:74:2b:38:75:6c:06:d0:32:
39:73:b3:00:01:f5:d9:37:7f:4e:df:df:99:d9:ef:c4:b7:c3:
78:e9:07:88:82:6c:c5:fa:01:64:d1:f9:16:3e:5f:fe:d1:e7:
b8:ce:d8:be:26:84:b8:ab:ba:5f:a1:82:8c:b1:50:80:75:67:
2b:69:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:36:31 2024 by rpki-client on console-ams.rpki-client.org