Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer (raw, json)
Hash identifier: 5GwocyoTxY29HoEhM2q0YB/dTswTgUPLcQR88LJjuYg=
Subject key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01932D819E6F5089463F6EAE81670AD31A6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Nov 2024 01:48:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214008
IP: 64.190.21.0/24
IP: 2001:67c:f44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2d:81:9e:6f:50:89:46:3f:6e:ae:81:67:0a:d3:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 15 01:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:1f:1e:93:57:8d:0c:e9:ea:24:51:5f:dd:
af:d4:b9:68:01:71:5f:82:aa:24:03:d6:40:51:fc:
6c:66:20:f9:47:64:53:fe:b0:3d:72:0f:da:f3:e8:
45:05:ce:6f:9f:21:17:4b:9e:09:5a:29:ea:ec:4a:
02:63:49:81:23:48:9e:07:07:52:88:8c:01:d1:e6:
dc:0c:6d:01:4f:fa:de:62:07:64:c7:09:4f:47:b4:
22:a6:98:44:b6:e1:9a:51:d6:34:7b:db:db:c3:dd:
c0:58:41:ee:4d:9f:4b:b6:31:df:27:c0:72:83:ac:
35:b0:11:2c:28:38:0e:e6:47:67:d6:d3:4c:b6:35:
64:52:55:dd:c0:36:86:5c:3f:84:1d:b0:51:01:c6:
c0:5f:f7:c9:5d:71:58:18:bb:13:bc:bb:31:2c:23:
95:39:1a:fe:f8:9c:1a:b4:9a:41:10:49:5b:42:62:
17:af:63:e1:77:14:f5:c2:f1:1d:34:7e:79:52:c9:
b8:88:8e:62:2c:12:61:11:dc:52:bc:c8:74:a5:dc:
da:65:22:62:79:b7:c0:95:b8:2a:fd:ce:d8:cc:a6:
96:b0:86:89:92:ce:78:13:00:ce:72:31:2e:ac:eb:
dd:d8:bb:d1:b6:84:1e:6d:1f:50:a5:d8:3a:fc:5b:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.21.0/24
IPv6:
2001:67c:f44::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214008
Signature Algorithm: sha256WithRSAEncryption
7c:74:c6:e4:f8:83:a6:f7:a6:0f:97:67:a8:82:99:6e:30:0e:
a4:b4:c8:27:cc:45:c6:93:91:3c:e3:97:33:ff:98:86:34:f3:
cd:88:d4:7d:8b:f8:ef:2c:db:db:ee:e9:f2:b2:22:a7:26:4d:
64:c1:4f:78:8c:32:d1:b7:95:f8:f7:3a:17:2e:bc:52:59:a1:
1b:e6:59:ef:9f:bb:be:09:e9:07:d7:27:71:5d:1c:af:43:94:
06:3d:55:f8:a9:36:93:cc:1a:80:2b:ae:59:51:44:cf:12:ae:
9e:51:d3:e9:8f:1b:eb:f3:c8:40:bb:5e:11:36:0c:ae:cf:9b:
1b:2e:10:4f:71:b9:2a:f9:a3:74:59:5b:bf:29:03:2a:ff:2a:
cd:be:96:54:44:8f:30:01:e9:33:88:d6:b5:a6:79:83:8c:24:
f1:c1:50:42:89:b1:e2:4d:8f:43:d2:60:da:76:6b:b2:92:c5:
3e:36:9f:1f:25:74:36:a2:d9:b2:6b:40:35:44:0e:bc:c6:06:
9b:b7:3b:6a:5e:9d:fb:af:94:c5:78:6b:48:72:0f:01:d1:cf:
ce:c0:90:0b:18:44:82:7a:2f:09:c1:dd:8b:ea:3c:45:c7:f4:
6b:3f:fd:b0:b7:ac:1c:81:cc:06:af:8d:4a:fa:08:a2:0d:05:
e1:ae:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:18:26 2024 by rpki-client on console-ams.rpki-client.org