Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer (raw, json)
Hash identifier: tRo+b6j/V+pOVEEIYJYR/ZWKZPeyPVigDhxFkTS4e18=
Subject key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6DAEC90D855F74BB20B62CE31B2C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208383
IP: 45.141.32.0/22
IP: 2a0e:ca40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:da:ec:90:d8:55:f7:4b:b2:0b:62:ce:31:b2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:63:27:58:1a:0f:ea:f6:48:0c:c9:10:d5:
2c:e1:aa:56:5d:38:e1:2c:a6:53:c6:6a:d4:0f:f6:
e8:0d:fe:50:8e:bd:42:59:59:37:ce:15:c3:15:58:
0f:25:ae:bd:03:08:01:b4:06:24:3c:d9:1f:f6:4d:
cd:53:e5:b4:05:f0:eb:b7:38:57:55:30:33:1b:3d:
bc:a0:8d:a1:ab:f9:7d:49:83:94:e7:ac:bd:34:b7:
e7:93:20:e2:7b:7c:39:dd:45:9c:ee:29:93:9e:8f:
75:db:04:03:0d:66:56:4b:13:9e:a6:a1:b2:64:77:
fd:0c:15:5a:2f:89:67:9c:13:c1:6a:76:97:dd:99:
32:79:7d:b6:64:d8:c8:30:f4:f7:10:f9:e6:32:55:
34:ea:3d:ff:3d:dd:e8:df:a1:71:f6:4e:75:fe:57:
34:52:f5:d1:f6:0b:9f:54:bf:20:a1:ce:4f:3e:f9:
c8:be:34:94:73:ba:fb:7c:cc:ba:76:e7:35:e8:9e:
b3:98:53:7a:40:a4:53:8f:e6:b2:e1:02:b0:ed:09:
6e:eb:cb:5f:7e:de:25:e5:43:e3:48:92:c8:72:67:
38:d4:43:62:64:f3:ed:aa:b7:86:c9:fd:6a:aa:d1:
93:4b:90:e1:3e:41:79:a7:45:e1:58:72:91:3c:b3:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.32.0/22
IPv6:
2a0e:ca40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208383
Signature Algorithm: sha256WithRSAEncryption
18:d8:a6:d2:55:45:0e:66:6e:e6:d0:1d:17:8d:92:21:40:07:
a0:7a:b4:97:e4:ed:69:2d:56:4c:de:7a:c4:1a:aa:41:e2:a4:
fe:34:04:b8:da:3d:6b:6d:af:0c:2c:ab:65:29:e7:20:a1:c7:
38:78:8d:30:ce:fd:d8:3d:2a:06:c7:14:31:98:1e:9c:9c:30:
4d:af:e0:db:d8:d6:3e:e1:21:17:70:69:ac:1e:07:7d:a1:4a:
9c:62:59:5b:57:32:a7:a0:0a:80:2d:9f:1e:03:20:65:44:17:
6f:03:04:b4:f2:fc:8e:24:f5:ba:d9:83:0e:99:2f:ad:36:19:
f6:70:f3:3b:ec:5b:ac:c8:16:4f:34:2b:fc:b2:0d:27:b6:09:
62:f5:ca:d6:48:d6:f9:79:a2:e4:52:da:f7:29:a7:dd:fc:de:
f0:52:07:8d:c2:8e:59:cc:83:78:0c:c8:7c:d4:1f:a5:49:1e:
98:15:aa:9f:b7:b1:d3:8d:d3:f3:31:31:cb:7c:1b:03:cf:b4:
de:21:29:98:c4:70:80:c8:0d:33:f3:d9:41:87:6c:ec:4a:ba:
5c:ab:ce:62:bf:c1:47:f4:9a:92:9d:7d:ab:7d:1a:9e:10:00:
1c:e1:7e:29:2a:28:1c:55:1c:04:82:25:9f:8f:1e:63:23:8b:
9d:69:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:59:03 2024 by rpki-client on console-fra.rpki-client.org