Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.cer (raw, json)
Hash identifier: AlAu74nQfenRs1tXvxNmEdZYFg4UDYp9kC3D+TYahkw=
Subject key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE7B7F72DEFE067309FFA67DC22F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212329
IP: 91.236.64.0/22
IP: 185.216.48.0/24
IP: 2a10:a700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e7:b7:f7:2d:ef:e0:67:30:9f:fa:67:dc:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:7c:9e:4d:c9:61:22:c5:0c:4b:72:f3:55:
c0:e7:89:d1:65:b6:04:7a:be:ee:43:ad:54:9b:0a:
48:33:10:9d:1c:91:24:e8:7a:52:54:fc:9a:15:da:
98:53:ad:24:5b:5e:3d:d7:22:d2:13:03:4d:d5:72:
cf:45:43:05:27:bd:ca:22:a8:23:81:18:d7:1c:79:
fa:50:c1:46:16:bb:04:dd:f4:d3:0a:80:4a:5e:e4:
29:1c:d7:1f:e1:32:47:66:30:ef:28:62:39:10:70:
1a:29:5f:40:11:68:dc:2a:62:70:8a:12:14:41:4b:
0f:88:18:68:1c:e0:35:40:98:49:86:52:03:29:d6:
c4:22:c6:88:53:b3:da:71:d3:5a:06:c8:4f:b1:2d:
53:b1:d2:b2:b0:cc:6b:2c:19:2d:e6:8a:bf:7e:8a:
60:aa:cc:4a:48:1d:24:ab:30:ea:04:f8:d4:f5:6b:
c2:1e:c6:b2:ff:d9:a0:30:0a:73:f4:58:a7:64:7f:
fe:b3:f7:77:3a:cd:c5:10:1b:e2:cd:2e:33:87:35:
4a:ac:54:75:22:d4:63:7f:c7:7b:c9:64:20:5d:e3:
de:e4:02:82:60:ab:7e:fd:1d:36:f4:d3:0e:9b:54:
42:ec:1b:88:4b:34:e7:b5:55:aa:9d:81:0f:17:d8:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.64.0/22
185.216.48.0/24
IPv6:
2a10:a700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212329
Signature Algorithm: sha256WithRSAEncryption
49:17:9e:0d:ce:79:10:e3:01:b5:ac:2f:56:51:ec:5d:5e:f3:
cb:e4:a7:db:6b:3a:89:d8:fd:12:57:29:0d:72:e5:25:a2:29:
36:00:37:cd:b7:af:27:ff:ae:10:9e:36:b4:a4:43:da:04:af:
83:94:96:b9:92:58:6c:1b:12:98:0a:e6:6d:05:d4:a7:6e:aa:
42:22:42:bf:14:7a:da:bf:7d:76:2e:5e:1d:1e:49:5c:23:1c:
ab:b3:86:2b:d8:15:c1:50:69:2c:7d:06:92:96:1d:25:09:69:
42:c2:18:25:6d:b8:d8:c6:ca:04:27:6b:f5:60:7d:fb:ea:3d:
10:fd:2d:38:d6:b4:5a:c6:0d:22:0f:6c:f2:a7:19:80:62:1c:
97:a5:63:95:96:c1:92:92:2a:ad:91:b6:35:85:fd:c4:3f:8c:
8e:22:37:19:41:3d:d9:9f:20:3e:8f:f6:49:f3:95:5c:d2:2b:
36:85:3f:da:85:4d:f1:3e:ff:57:9c:6f:2c:a3:52:f2:26:63:
5f:16:24:67:06:a6:cd:d8:fa:ba:b0:a4:03:e3:b9:53:30:a0:
61:12:0e:52:65:36:02:43:e7:60:a5:79:3f:41:4f:87:2f:f9:
ea:b6:6b:d4:c9:96:f0:27:2b:3e:f9:3b:a1:7a:9b:21:8f:ec:
cc:9e:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:58:41 2024 by rpki-client on console-fra.rpki-client.org