Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
File: 3N7T6jumc6gIz15q3LUep_M_QgM.cer (raw, json)
Hash identifier: iST2brZEqAulync/sUB8SYeY7u6T6d3LsLzJ3S/xBPk=
Subject key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190F4E746F1EBAF1201FE19B9EF970E5D60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 27 Jul 2024 15:55:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199495
IP: 91.223.146.0/24
IP: 2a13:bd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:e7:46:f1:eb:af:12:01:fe:19:b9:ef:97:0e:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 15:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:18:c7:99:40:9c:92:11:e9:c2:4f:88:57:
4b:55:ba:e4:e4:02:78:bd:b8:e8:ec:19:e4:be:ea:
e7:f7:e8:a4:50:d7:1e:87:60:fb:9d:ac:b3:38:8c:
3a:be:5a:e5:b9:03:d4:d5:dd:22:c4:c1:4f:47:fc:
9c:fd:69:65:48:94:d4:de:e9:b2:41:79:90:87:09:
50:86:15:4a:8a:a6:60:80:86:d5:e3:a1:46:9f:a2:
3c:a3:f6:5c:46:31:d4:70:08:be:2e:cf:fd:61:91:
c6:82:94:18:84:ff:62:c2:13:40:00:a9:a5:62:fc:
59:01:28:a7:1a:0a:4f:4a:1c:45:eb:8b:93:48:b1:
4e:a7:9c:aa:e2:6e:60:31:d4:85:a9:51:50:95:02:
88:82:a8:83:90:b0:7a:86:18:a6:6d:f7:1f:d4:80:
3e:fa:55:85:d3:89:97:3f:86:19:eb:8d:e2:ff:ed:
b1:c2:eb:44:05:e5:7e:95:4d:05:fb:22:ac:f4:0e:
99:b7:2e:65:69:c0:07:3c:c6:d2:37:b9:a3:4b:f6:
5f:b1:b0:f5:a2:66:89:3e:01:f9:2c:69:09:f5:ce:
8e:9d:fc:4c:4a:10:b4:5d:13:56:94:87:82:f4:24:
6f:d7:24:f0:f9:0b:1d:af:58:4e:a2:90:30:96:3b:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.146.0/24
IPv6:
2a13:bd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199495
Signature Algorithm: sha256WithRSAEncryption
76:f7:5a:c6:24:a0:ba:9b:a6:34:49:a6:fa:5b:77:b7:0f:c7:
e9:6f:73:97:00:eb:c8:e7:92:9e:a0:6d:1f:7e:65:a0:01:ff:
ee:d1:5c:fd:fd:cc:7e:98:b0:d7:03:6a:67:c4:06:f5:9e:e9:
db:eb:3d:ec:f5:09:80:c6:75:62:8b:bc:a1:10:86:53:fc:be:
d7:2d:b3:c1:1d:bd:58:5f:80:cf:f6:8a:2c:fd:c7:ec:e7:70:
40:43:89:79:e8:89:67:57:9e:70:dd:94:a2:c7:85:7d:e7:7a:
59:94:c1:2c:df:58:b1:6e:42:90:af:cf:26:b8:5e:ca:6d:2d:
fa:da:04:21:bf:eb:6d:f2:31:e9:69:85:e9:85:2a:5d:12:2d:
08:67:f9:1d:16:f3:a9:53:56:1d:bc:a5:87:7c:db:84:a8:61:
2a:02:42:17:d1:80:88:a2:d1:e0:2a:a8:90:62:48:f3:7d:07:
04:e7:92:08:09:d1:1f:8f:bb:9a:07:83:b2:5f:7c:4b:ad:a3:
ff:8c:b2:b3:08:2d:9c:e7:65:ea:16:41:48:16:58:5e:6c:81:
83:60:6c:15:f5:0b:5f:9e:ac:92:72:0c:3e:c6:6b:74:53:c2:
43:c6:a4:bf:97:b5:11:4e:26:0e:ea:37:1d:ee:11:6c:71:a5:
68:2a:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:50 2024 by rpki-client on console-ams.rpki-client.org