Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer (raw, json)
Hash identifier: Ua1Jxbo0nh7AQ9IL7IBj0hTXrsLmN4a4xL0475bZstM=
Subject key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72552C9C7960070E22A97C973D06B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49773
IP: 91.218.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:25:52:c9:c7:96:00:70:e2:2a:97:c9:73:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:88:9a:26:d0:82:1a:77:a9:4d:4a:66:3c:
06:38:bc:14:b8:46:79:c8:28:a6:1c:a4:b5:93:b1:
17:2c:d1:6d:a9:35:83:3c:9f:fa:7a:81:ce:0d:66:
a9:68:5b:66:56:9f:b8:0e:b1:91:8a:21:61:f8:36:
e0:e3:a8:9a:ad:0b:94:2b:02:2b:c8:ac:b5:d4:e3:
d8:01:76:9e:b8:66:bd:c4:5d:0b:71:b3:bf:f5:55:
af:3c:f4:98:35:3e:98:c2:13:14:b8:f4:84:64:cc:
50:f8:a4:1b:37:ad:ae:d5:6f:2f:f7:7f:3e:9e:52:
24:10:e0:84:04:3b:cd:14:cc:0e:76:38:59:5f:63:
54:46:82:54:0f:c0:cd:ab:ac:41:6e:25:87:1f:06:
0d:52:e2:74:41:29:10:b4:82:50:92:49:b3:8f:ad:
28:f0:da:4a:f5:cd:9e:c6:2d:33:4f:66:38:05:ed:
cb:6b:c7:72:46:39:96:69:d6:02:d1:68:50:07:02:
2a:0a:67:21:e3:1d:e0:c8:71:02:ee:a6:ac:6c:56:
cd:53:43:fc:ac:99:a2:9a:a8:d2:5f:b0:c0:2b:78:
5d:98:58:4b:29:d7:2a:b9:48:8f:c4:41:71:3a:c1:
9a:66:ea:ef:a6:6c:3b:43:be:2e:cc:66:8f:7e:8b:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49773
Signature Algorithm: sha256WithRSAEncryption
96:8c:e9:fd:8d:d4:56:0a:e5:38:01:72:88:bd:d9:f5:b7:01:
8f:64:21:29:1c:20:43:42:ee:6a:9f:4d:91:da:23:62:fb:8b:
62:7b:88:ee:25:16:7e:5e:47:11:a9:f7:bc:dd:76:4b:ff:ba:
f4:db:8a:df:a4:2f:a1:f9:72:9c:a7:fc:7e:66:e8:5f:02:34:
cc:d6:b0:8b:87:17:df:d2:46:68:cc:0e:6b:eb:b4:3b:f5:c2:
5a:9d:a8:59:dd:49:13:fa:18:2f:b7:86:b7:1f:45:0e:58:ef:
6e:df:5d:6e:a0:5d:e1:ad:8c:5d:9e:59:9e:8f:01:90:3d:13:
c7:06:56:12:35:96:ea:58:a5:09:71:0d:8a:bb:91:4f:95:8b:
3f:22:89:bf:d8:50:61:ac:d8:81:f7:60:79:3c:07:88:7a:ba:
b2:07:61:a5:69:ba:4f:bc:43:cc:4f:21:0f:51:14:b0:ff:7b:
61:66:22:54:08:81:20:08:4d:1c:fc:6e:13:7d:2c:75:47:5b:
d6:29:19:e7:91:43:71:3e:41:d5:dc:d4:ce:19:fc:9c:c1:4e:
d3:3a:41:eb:e6:f1:9c:79:52:40:d9:06:82:49:a2:00:38:d4:
53:85:6d:05:8b:a2:c7:b6:04:09:26:ad:6f:ee:ab:a7:cd:ca:
03:93:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:00:19 2024 by rpki-client on console-ams.rpki-client.org