Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
File: 3KonREWCbj15XD7RjCdwDurBymI.cer (raw, json)
Hash identifier: 5QRYIEzxM8eRUoiFzX2qVAP4TEXuGKKUZSjCoUquL4w=
Subject key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B709B6F2DB413901EC3BD880228BC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207040
IP: 185.163.132.0/22
IP: 2a0b:e800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:09:b6:f2:db:41:39:01:ec:3b:d8:80:22:8b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:c2:21:92:e4:d2:b0:d0:b2:64:ac:de:3e:
26:de:33:10:48:d1:de:08:65:94:ad:1d:3c:51:e9:
42:53:21:16:13:ba:de:a3:4d:c5:11:0e:e8:b7:4c:
9f:51:09:a7:01:c3:82:7d:73:e5:7f:b1:04:08:f3:
87:f9:c6:c2:f4:ef:a1:24:83:d7:ed:fe:7a:5e:b3:
12:76:2d:7f:4b:d1:d1:9d:d9:0e:9d:45:d8:08:ca:
b5:0d:3b:3a:92:fd:c6:32:6d:65:2d:24:e8:03:49:
dd:bc:31:a0:9c:bc:bc:a6:0c:46:e1:89:79:72:c1:
48:2d:34:36:f8:12:f0:3a:72:ad:e6:86:a8:04:03:
17:fb:b1:62:f0:f7:dc:8d:3d:e9:eb:b2:f8:58:14:
64:7e:46:33:ee:2d:e6:ba:34:7f:79:44:eb:f1:2d:
49:80:fa:65:37:8a:b1:f6:0e:6f:3b:8c:16:ce:c1:
d4:90:8e:2d:a4:71:a3:36:84:85:bb:ba:f9:aa:cf:
5f:38:f6:1a:bf:3a:75:26:89:64:28:f5:5b:7d:db:
6c:8d:c8:ad:0d:68:61:d2:86:0f:c2:dc:8e:a5:ce:
2c:12:06:47:6b:d4:55:d3:86:d1:04:51:df:a7:88:
8e:59:89:e9:3f:20:9d:88:a4:be:b3:32:c5:bc:e3:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
IPv6:
2a0b:e800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207040
Signature Algorithm: sha256WithRSAEncryption
7e:af:72:ee:0b:7c:d2:c5:0c:f8:43:cb:a9:76:09:09:16:dd:
0a:ba:04:34:6d:ad:a7:ab:26:71:4b:19:b3:3f:21:ab:3e:fb:
e6:1d:45:79:b1:8b:57:ca:aa:98:6c:99:e2:14:79:56:cd:00:
8a:8c:28:c5:19:99:7e:1f:e9:46:43:fd:3b:83:d7:b4:19:b4:
67:e4:18:3e:70:0b:1f:a1:d6:e6:ca:73:2a:38:b8:c7:e9:93:
09:e4:8a:65:8b:13:c9:15:e5:dc:f7:1d:b0:9a:0d:7f:e5:51:
d8:f3:32:b8:bd:e2:e1:32:40:97:60:fc:fd:58:e4:b9:4a:e4:
29:29:94:ef:64:17:0c:5d:15:d7:68:79:35:f4:06:b8:80:17:
1d:7c:2c:0b:fe:83:f8:bd:32:a6:40:a9:5e:f3:48:4d:71:79:
39:60:b1:58:38:fe:8e:16:64:37:6b:cc:ea:7a:7f:dd:8b:15:
d9:72:1d:44:9e:f6:c3:e2:5b:fd:ff:39:6d:b9:70:d0:1d:35:
5b:35:b6:d2:bd:76:67:1d:2b:e7:b7:f7:2a:3a:3d:aa:02:d6:
56:ff:9c:c7:2f:48:a7:75:c4:c5:7b:52:f9:ed:da:e2:ee:03:
f5:43:74:4d:21:7c:1f:10:d5:6a:f3:f0:48:ad:d0:23:42:58:
89:68:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:51:16 2024 by rpki-client on console-ams.rpki-client.org