Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.cer (raw, json)
Hash identifier: uiHKe/VvGsvPLNpWxpwFhRLfCMHC5RlkACifv7DoUhc=
Subject key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE3784B100D856D405C8692570692C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:27a8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:37:84:b1:00:d8:56:d4:05:c8:69:25:70:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:7a:b0:04:73:1b:d4:b5:f8:e1:1e:45:ef:
7d:f4:a5:7a:e8:bf:0d:69:7b:fb:fc:b1:e3:be:0e:
87:cf:91:b3:f2:3f:a2:20:c3:07:d4:85:2d:e1:97:
93:17:c6:93:92:0b:4c:07:32:db:b8:ed:22:53:5e:
aa:4c:40:ce:42:83:7f:0e:cb:00:97:1b:a9:b4:d2:
f0:01:77:ec:54:78:2f:5a:27:dc:0f:1f:4c:83:f8:
7a:56:4e:b6:f4:40:47:f9:54:0e:e5:02:52:4a:b2:
65:46:8a:f7:3f:5c:ea:14:8f:b6:50:5a:5c:9c:d5:
ab:80:f4:03:98:26:88:33:5c:13:f9:81:28:a4:5a:
c9:1e:e4:12:92:f3:a8:2d:3f:e8:3e:d8:e9:0b:fe:
26:5d:b4:62:80:98:88:7d:ad:74:39:f2:56:e9:47:
57:e4:ed:13:48:49:cb:5d:9a:8e:47:0c:55:ba:12:
be:5d:23:65:91:2e:a7:d2:af:34:7d:ce:9a:c2:35:
15:ae:2b:3c:80:4f:2c:f9:6b:c4:ee:75:39:72:44:
91:33:30:96:9e:cf:b8:9c:f7:63:25:48:db:2d:18:
45:07:92:f6:d8:67:c5:2c:fb:3d:da:af:07:6f:58:
b9:d8:c4:1e:ec:ca:98:bd:78:41:36:97:7f:77:0e:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:27a8::/48
Signature Algorithm: sha256WithRSAEncryption
9e:1b:bd:11:74:51:51:50:c9:a1:76:4b:47:e8:4e:32:c1:cd:
cc:fa:5c:b6:49:e1:92:c3:00:18:b0:a3:bf:f0:62:da:17:09:
bb:33:9e:e8:cb:01:9b:09:2d:06:94:3c:82:ff:b4:63:fb:e4:
a8:95:2c:ac:27:67:09:bc:2a:6b:66:6e:e1:44:16:99:3f:52:
61:fc:ef:1f:51:52:40:9d:cf:d5:81:ef:5a:86:68:d8:46:7b:
02:20:b0:e3:0a:ea:25:ab:6f:00:ac:2e:ca:a6:ed:6d:18:cf:
9e:07:e4:61:a0:00:cb:93:b8:c8:be:70:05:7b:b9:30:f7:76:
d4:39:36:a0:4b:f2:dd:47:3d:53:a3:1f:36:8e:22:de:50:7b:
82:9c:cc:24:3d:15:33:b9:bd:61:c2:32:a5:51:4f:59:8d:7d:
68:7c:d9:9d:cf:f2:51:01:fc:a7:cc:27:00:ce:c3:a5:1b:3b:
23:aa:b4:96:a2:d4:30:e6:9f:17:71:17:06:e7:f8:a3:ae:0d:
b6:00:e2:21:a0:d7:59:42:7a:56:81:89:bf:ed:d1:91:63:d1:
52:c2:0b:64:bb:e0:9d:3f:97:74:0e:b1:cd:07:51:46:7f:3b:
38:98:f0:18:ad:62:82:61:88:68:b5:98:63:44:29:de:51:da:
1a:3d:ce:e2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzI3jeEsQDYVtQFyGklcGksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ0YWQ0YmY0MTQxN2JhMzgzODRkNjViYzJkMDdjMGY2ODUwOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcl6sARzG9S1+OEeRe999KV66L8N
aXv7/LHjvg6Hz5Gz8j+iIMMH1IUt4ZeTF8aTkgtMBzLbuO0iU16qTEDOQoN/DssA
lxuptNLwAXfsVHgvWifcDx9Mg/h6Vk629EBH+VQO5QJSSrJlRor3P1zqFI+2UFpc
nNWrgPQDmCaIM1wT+YEopFrJHuQSkvOoLT/oPtjpC/4mXbRigJiIfa10OfJW6UdX
5O0TSEnLXZqORwxVuhK+XSNlkS6n0q80fc6awjUVris8gE8s+WvE7nU5ckSRMzCW
ns+4nPdjJUjbLRhFB5L22GfFLPs92q8Hb1i52MQe7MqYvXhBNpd/dw5pyQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFN3UrUv0FBe6ODhNZbwtB8D2hQnhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzA5NDk2
OS0xM2VkLTRjMTQtODU3NS03YmM4YzIwYTIzNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMDk0OTY5
LTEzZWQtNGMxNC04NTc1LTdiYzhjMjBhMjM1YS8xLzNkU3RTX1FVRjdvNE9FMWx2
QzBId1BhRkNlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCeoMA0GCSqGSIb3DQEBCwUAA4IBAQCe
G70RdFFRUMmhdktH6E4ywc3M+ly2SeGSwwAYsKO/8GLaFwm7M57oywGbCS0GlDyC
/7Rj++SolSysJ2cJvCprZm7hRBaZP1Jh/O8fUVJAnc/Vge9ahmjYRnsCILDjCuol
q28ArC7Kpu1tGM+eB+RhoADLk7jIvnAFe7kw93bUOTagS/LdRz1Tox82jiLeUHuC
nMwkPRUzub1hwjKlUU9ZjX1ofNmdz/JRAfynzCcAzsOlGzsjqrSWotQw5p8XcRcG
5/ijrg22AOIhoNdZQnpWgYm/7dGRY9FSwgtku+CdP5d0DrHNB1FGfzs4mPAYrWKC
YYhotZhjRCneUdoaPc7i
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:59:22 2024 by rpki-client on console-fra.rpki-client.org