Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer (raw, json)
Hash identifier: HvJePO32tgQbwyy+rBJoEJgDZGqWF8hG2QbS7uuxat8=
Subject key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1EDE5C07390CD5F258969EA81270
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211972
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1e:de:5c:07:39:0c:d5:f2:58:96:9e:a8:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:a6:9d:02:a4:1a:83:ce:ba:eb:34:71:68:
59:50:29:8e:11:35:d8:6e:5e:10:74:b6:ea:53:00:
1b:45:39:49:b5:b8:7e:ba:3f:ca:25:6b:0d:e1:b2:
2b:7b:f1:9d:9e:ce:b3:bd:db:3f:78:61:71:af:33:
f6:e3:14:e1:87:a5:00:33:30:5a:cf:6d:d5:93:55:
75:5b:3f:10:f4:7c:42:13:bf:df:54:2e:b3:0b:54:
21:2b:3b:c7:2c:f9:ce:c5:1c:77:3b:4f:9c:13:f2:
93:f8:60:b3:9c:35:17:24:d3:22:5d:eb:f0:b2:74:
f3:19:38:74:82:4b:6c:3c:04:0b:d2:2a:66:04:62:
91:ba:8f:21:9d:cc:38:d8:64:3c:cd:28:ce:18:5d:
a7:15:1c:0f:58:9d:0f:32:b3:8a:05:58:86:23:03:
de:b4:95:b6:3e:e4:85:ef:e4:82:5f:8d:67:3c:df:
88:6c:a2:34:bf:a8:3d:61:f0:19:56:89:eb:7d:b5:
54:38:3f:6b:04:d3:01:ce:e9:d9:6c:9c:07:7a:85:
d9:cd:bf:28:7f:98:88:ea:bd:b4:e3:eb:24:96:cb:
cf:a1:e9:3c:c0:f7:c9:64:67:7b:96:e5:ea:df:68:
f7:42:da:78:78:b8:b5:c1:6c:c4:ae:42:a3:56:d8:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211972
Signature Algorithm: sha256WithRSAEncryption
b0:97:a3:8d:f7:31:52:02:08:6e:28:a1:54:42:6a:87:13:e7:
70:d5:55:32:1f:71:56:6a:78:8d:3d:13:ea:8f:65:09:77:77:
4a:c7:31:c7:9d:f3:71:0f:bb:5b:4e:74:80:20:40:68:dd:59:
72:44:d8:c5:b1:84:7c:dc:4d:a2:01:da:99:c5:07:21:30:15:
69:52:20:40:bd:54:82:02:a7:cb:98:b7:5e:7b:f4:36:8f:85:
fc:7e:af:90:ec:01:46:98:4d:ee:22:39:1f:0e:ea:4d:08:0c:
0b:f4:aa:c3:ca:bb:97:3b:d1:c6:cc:de:c5:5f:52:35:0e:49:
28:c3:cc:46:68:f2:85:39:83:4e:88:81:af:4b:67:20:8e:2e:
92:5e:bc:73:b0:0e:6d:14:0b:28:a7:2b:0f:38:fe:e7:c2:42:
69:eb:3b:2d:40:ef:19:b1:9f:aa:86:a5:f0:fc:35:a0:c3:2f:
e2:87:24:25:03:bd:87:8d:7d:22:e6:88:59:7d:7d:24:79:a2:
6b:78:95:70:f9:ae:ba:c5:90:cc:52:49:67:2b:5a:a7:db:f6:
3c:f6:79:9e:f3:50:48:6e:f0:0a:34:96:21:75:b1:15:d1:72:
07:06:26:dd:2a:2f:0b:ba:35:67:8d:f1:20:bb:23:89:1a:66:
39:95:d9:be
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzJTh7eXAc5DNXyWJaeqBJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGMwMTY3NDA2NDQxZWExNmM0NzQwNmQwNTIyYjVjNjYzMGFiY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveymnQKkGoPOuus0cWhZUCmOETXY
bl4QdLbqUwAbRTlJtbh+uj/KJWsN4bIre/Gdns6zvds/eGFxrzP24xThh6UAMzBa
z23Vk1V1Wz8Q9HxCE7/fVC6zC1QhKzvHLPnOxRx3O0+cE/KT+GCznDUXJNMiXevw
snTzGTh0gktsPAQL0ipmBGKRuo8hncw42GQ8zSjOGF2nFRwPWJ0PMrOKBViGIwPe
tJW2PuSF7+SCX41nPN+IbKI0v6g9YfAZVonrfbVUOD9rBNMBzunZbJwHeoXZzb8o
f5iI6r204+sklsvPoek8wPfJZGd7luXq32j3Qtp4eLi1wWzErkKjVth26wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN3AFnQGRB6hbEdAbQUitcZjCryzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2M2MDdi
Ny0xODdiLTQ1NDUtYjYxNC0zZDlhZWRhYzJiMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzYwN2I3
LTE4N2ItNDU0NS1iNjE0LTNkOWFlZGFjMmIzMy8xLzNjQVdkQVpFSHFGc1IwQnRC
U0sxeG1NS3ZMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8BDANBgkqhkiG9w0BAQsFAAOCAQEAsJejjfcxUgII
biihVEJqhxPncNVVMh9xVmp4jT0T6o9lCXd3Sscxx53zcQ+7W050gCBAaN1ZckTY
xbGEfNxNogHamcUHITAVaVIgQL1UggKny5i3Xnv0No+F/H6vkOwBRphN7iI5Hw7q
TQgMC/Sqw8q7lzvRxszexV9SNQ5JKMPMRmjyhTmDToiBr0tnII4ukl68c7AObRQL
KKcrDzj+58JCaes7LUDvGbGfqoal8Pw1oMMv4ockJQO9h419IuaIWX19JHmia3iV
cPmuusWQzFJJZytap9v2PPZ5nvNQSG7wCjSWIXWxFdFyBwYm3SovC7o1Z43xILsj
iRpmOZXZvg==
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:46:30 2024 by rpki-client on console-ams.rpki-client.org