Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer (raw, json)
Hash identifier: 4helWy1Ur+4WvZSnAOWpAZO9Sg8vLJXZQ596QHrWo0c=
Subject key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424CFB90F0AFBB4F12B5EC03BF0AEC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201293
IP: 185.79.188.0/22
IP: 2a03:5da0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cf:b9:0f:0a:fb:b4:f1:2b:5e:c0:3b:f0:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:fd:8d:cd:7c:2a:8b:ff:f9:46:cd:a8:86:
0b:ff:b8:e4:5e:1e:c5:ab:14:05:8f:16:74:e0:fa:
30:bf:6a:50:83:d4:a4:85:25:cf:0b:df:49:13:d5:
a8:7d:f4:08:e1:a5:59:6a:0d:1c:28:ef:a3:24:e7:
0a:e5:7b:0f:a7:57:98:89:76:d0:30:85:63:c0:fc:
9b:59:22:d2:10:3d:53:62:eb:24:b0:c7:c8:42:ed:
4d:14:64:e7:62:1b:19:82:e8:a6:2d:f8:f2:f1:ab:
b1:f8:67:eb:bc:58:ae:ab:7b:ea:94:60:8e:39:fa:
2a:7f:67:30:ec:75:32:9e:db:9f:59:88:a9:56:23:
a6:99:74:0e:c2:b7:47:1c:aa:37:d9:7d:c9:08:ef:
c5:ea:43:a3:b4:9a:e0:67:4f:8b:d4:ea:c3:94:02:
24:d7:91:2c:c4:6a:84:18:a1:88:77:86:97:56:f7:
9e:45:90:03:8f:d8:e6:32:51:40:9b:af:ae:64:ce:
ed:07:18:82:a5:7c:cc:8b:e7:7c:4c:98:80:13:0d:
58:f7:33:27:79:aa:bd:a0:31:58:e2:49:f5:44:71:
f7:31:c7:22:e6:11:58:55:e4:66:91:7c:32:df:c9:
af:52:b2:ac:8d:17:3f:40:3a:dd:ac:3e:94:79:ea:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.188.0/22
IPv6:
2a03:5da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201293
Signature Algorithm: sha256WithRSAEncryption
2c:4e:75:95:4d:e4:74:c4:46:19:b9:93:c7:5f:a9:50:8e:c6:
2d:dd:15:f2:ba:21:a7:5f:41:4f:fe:b0:02:ca:b0:d6:ac:43:
31:41:d6:7e:08:22:a9:c2:e8:ce:00:90:79:6f:88:0b:22:93:
e1:cc:ee:45:33:c5:90:72:5c:7f:31:8d:34:51:7b:bf:a8:89:
f3:03:c6:23:11:6f:aa:89:34:5d:a8:0e:d4:ad:5a:96:ed:79:
94:b5:a8:c9:28:ad:f8:c1:ec:e1:48:c4:1e:4a:1d:55:30:f6:
44:7e:c2:4f:fb:0a:d2:e5:13:7a:cf:7f:62:3d:c8:2a:76:bc:
65:20:ba:70:1f:58:f9:c7:4a:b5:1a:25:48:25:3f:b3:33:20:
97:0d:66:57:42:4c:46:d7:e0:61:f5:d7:9a:fc:c5:52:c2:68:
ab:47:50:05:a7:e6:c6:67:4d:c7:5a:33:b3:5e:81:34:ef:b7:
04:72:f0:72:b4:be:86:60:00:1e:8d:a7:22:c8:be:d1:77:f8:
7b:61:f4:46:7c:bb:42:34:89:66:ef:09:ba:3e:df:e6:14:fb:
e5:50:97:f6:4a:d3:fa:f3:2b:50:7a:4f:17:08:50:2f:0d:8e:
32:66:e1:f5:ba:ef:5a:a0:db:2c:d8:ce:c5:ec:36:0d:42:32:
3a:1c:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:33:06 2024 by rpki-client on console-fra.rpki-client.org