Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
File: 3f3F4pPp59caluYcPb9oWF1PgwU.cer (raw, json)
Hash identifier: wZpQGXegL6V5Q5ncKjuGbnPX+oepkh9rsgH30oNZOXU=
Subject key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5EC56C45DBB0EA261CC2ABF6A40F4483
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:06:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.247.194.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c5:6c:45:db:b0:ea:26:1c:c2:ab:f6:a4:0f:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:06:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:1d:be:bb:5e:72:44:ca:cc:e5:6f:17:30:
3b:8d:dc:9e:d3:83:dc:e1:74:91:f7:a2:30:2e:02:
3a:12:e8:65:05:a5:87:29:93:58:0f:e7:20:16:d9:
de:32:55:8e:32:41:8f:99:7e:c5:f3:de:b5:84:91:
16:bf:c7:24:0b:d4:64:ef:74:2a:9f:f7:cd:e1:dc:
26:3b:5a:57:74:f5:a5:a4:ed:10:de:e7:b8:02:7b:
b0:4e:c0:67:b8:c8:ad:90:0a:61:85:cb:09:34:71:
09:f4:4e:6b:2b:4e:21:89:2a:62:c8:9e:f2:13:f6:
d8:3b:26:7b:a5:f2:c1:57:29:96:71:b2:d0:1a:17:
4c:9b:7d:7e:70:99:d0:bd:e0:56:90:63:bf:12:b8:
71:85:04:ec:46:a7:17:95:e2:72:6b:2f:37:23:91:
99:8c:f7:4e:c8:89:ab:3e:67:b3:dc:07:98:86:82:
ee:23:bf:f4:5d:c6:a3:7f:f9:3e:42:74:0e:e4:27:
40:a8:44:c6:c2:90:c5:59:ca:c4:e7:dd:3c:d9:f9:
3a:49:6a:27:13:2e:05:39:be:ba:85:b5:cd:3e:c8:
0f:cb:fb:54:df:0d:21:fc:46:17:b4:1c:8d:45:3c:
4f:2f:c6:ad:81:d6:6f:a5:9e:c1:2f:de:d6:56:43:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.194.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ed:96:31:c4:19:23:86:1e:7f:59:60:78:9a:ce:bf:ff:65:
2b:8d:7f:cc:ff:b4:cc:5e:09:7c:d7:f5:c3:17:3c:7d:94:cd:
b4:18:68:1c:d6:80:0b:3b:b2:78:71:ba:26:53:c5:4c:82:95:
5a:c9:e8:f2:96:b2:ab:eb:40:6b:e4:d1:a4:ca:be:49:14:50:
64:06:a2:ba:60:bf:af:18:14:53:ce:00:7b:0a:5b:18:f9:1c:
9b:47:3f:23:92:f0:42:21:fd:64:cf:5b:ec:8d:fb:12:05:63:
22:ff:11:f1:8d:8e:0a:af:ef:2a:af:27:87:4d:af:d5:01:fc:
5b:c3:02:65:0c:64:8a:59:9a:24:29:41:cd:76:68:59:e6:cd:
3b:77:a5:08:c2:73:f4:e9:28:47:69:2e:7a:b7:7e:42:48:47:
a5:a8:a3:6a:38:bc:1d:67:a8:ed:3c:03:6e:df:f4:ce:79:22:
83:ec:dd:28:9a:22:af:5b:da:b7:ee:a8:1e:eb:8d:45:bb:f6:
f1:f5:bf:63:2d:eb:6f:55:46:eb:aa:93:e6:cc:dd:d4:d2:99:
cd:9d:49:2f:33:75:7e:57:82:a7:15:ab:52:17:03:6a:2c:f8:
e9:fe:35:dc:ea:f9:29:8a:9a:f7:c0:63:7b:37:97:f8:ee:18:
e9:51:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:50 2024 by rpki-client on console-fra.rpki-client.org