Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
File: 3ihtA6NzvWie8EYQocithHPr3a0.cer (raw, json)
Hash identifier: BiU4n5d8PjS/U5cOh00Ldn6Ku1vnh2za3hYyCFDbJOw=
Subject key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34899D1D7F45C53811D43B8E598265C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201679
IP: 185.64.132.0/22
IP: 2a03:13e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:99:d1:d7:f4:5c:53:81:1d:43:b8:e5:98:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:df:e0:14:97:61:24:69:2b:09:ed:e9:a5:
ed:38:d0:df:60:dd:08:2e:9f:83:8d:5e:22:f2:29:
59:ca:bb:b7:01:be:0e:47:44:90:31:23:11:3f:b7:
ac:05:8c:09:cc:0a:05:72:d8:44:a7:f5:01:d1:7e:
59:89:41:93:4d:5b:e4:f6:64:df:96:34:2a:fa:88:
51:35:ff:c0:a0:f8:4a:fb:c7:a2:23:04:5b:b0:7f:
fe:0b:94:f2:ac:62:0a:dc:bb:e5:c3:03:b1:07:54:
9a:5a:a8:74:61:86:e0:e0:e6:ee:e8:38:22:31:10:
a8:e0:b0:9c:9e:65:69:3a:f1:40:f0:68:56:16:7c:
3a:09:7b:18:82:90:fc:6d:4a:da:bf:4b:0a:26:2b:
63:5e:70:c1:5e:c2:b8:7f:58:55:13:0d:df:82:c1:
f4:3d:11:1e:f9:24:eb:3c:87:c9:72:2d:27:08:fe:
2a:3d:0f:42:32:de:cf:d9:58:f6:e7:49:88:d9:87:
18:1d:99:f3:bc:b6:f6:5d:16:fd:88:e1:3b:cc:20:
20:88:4f:1d:73:d6:1d:ff:f0:d7:53:f8:c5:ba:d9:
2a:f0:5a:c5:ed:81:f3:b1:cb:20:4c:3d:79:07:94:
c0:81:e5:0a:9a:28:f5:26:ec:c0:82:aa:81:d2:c9:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
IPv6:
2a03:13e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201679
Signature Algorithm: sha256WithRSAEncryption
08:c4:02:99:e1:e6:27:a6:fd:94:35:74:0b:fc:a7:78:0c:3d:
79:fa:2c:9f:94:a0:4e:d7:b3:36:9a:2e:cf:7e:fb:1e:38:97:
41:d9:59:ba:c1:2d:d3:11:d7:2f:df:1b:3f:12:cf:d9:c7:c2:
9f:a7:d8:6a:19:ba:2b:31:14:e4:10:b3:0d:98:54:df:b6:04:
dd:e0:7e:10:3f:77:79:51:7f:0c:18:79:42:d5:22:36:f6:3f:
17:13:82:6d:85:06:7a:0b:01:d1:37:ce:9d:57:8d:e6:8b:ab:
59:29:37:1b:0f:56:e2:bc:95:ad:3e:2c:fa:70:ec:69:e6:48:
b4:e1:19:88:b6:a2:40:9b:9a:0f:be:34:8f:62:d6:d6:e4:b6:
44:66:90:f8:ad:e6:5a:46:68:ad:81:ee:63:d3:c1:44:83:55:
2d:88:78:4b:be:1b:bd:3a:b0:93:c3:ab:79:12:2b:5a:1c:3e:
a8:aa:58:b2:37:ac:dd:8a:7f:c7:16:5d:01:1f:92:3e:4c:b1:
eb:fa:c6:d0:aa:12:8a:c0:d5:87:34:66:47:ea:4e:9a:77:66:
81:4b:c3:9b:02:1b:ea:1e:99:73:20:61:14:93:58:0b:a0:59:
44:7e:92:95:66:af:4d:fe:01:00:18:35:fa:33:75:e5:b1:20:
19:cb:f0:83
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDSJnR1/RcU4EdQ7jlmCZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTI4NmQwM2EzNzNiZDY4OWVmMDQ2MTBhMWM4YWQ4NDczZWJkZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Tf4BSXYSRpKwnt6aXtONDfYN0I
Lp+DjV4i8ilZyru3Ab4OR0SQMSMRP7esBYwJzAoFcthEp/UB0X5ZiUGTTVvk9mTf
ljQq+ohRNf/AoPhK+8eiIwRbsH/+C5TyrGIK3LvlwwOxB1SaWqh0YYbg4Obu6Dgi
MRCo4LCcnmVpOvFA8GhWFnw6CXsYgpD8bUrav0sKJitjXnDBXsK4f1hVEw3fgsH0
PREe+STrPIfJci0nCP4qPQ9CMt7P2Vj250mI2YcYHZnzvLb2XRb9iOE7zCAgiE8d
c9Yd//DXU/jFutkq8FrF7YHzscsgTD15B5TAgeUKmij1JuzAgqqB0slTwwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFN4obQOjc71onvBGEKHIrYRz692tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2RiZWYx
Ny05YmI4LTQ2YmMtOTM0My1jYWRmMGNhMWRkMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZGJlZjE3
LTliYjgtNDZiYy05MzQzLWNhZGYwY2ExZGQwZC8xLzNpaHRBNk56dldpZThFWVFv
Y2l0aEhQcjNhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUCEMA0EAgACMAcDBQAqAxPgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMTzzANBgkqhkiG9w0BAQsFAAOCAQEACMQCmeHmJ6b9
lDV0C/yneAw9efosn5SgTtezNpouz377HjiXQdlZusEt0xHXL98bPxLP2cfCn6fY
ahm6KzEU5BCzDZhU37YE3eB+ED93eVF/DBh5QtUiNvY/FxOCbYUGegsB0TfOnVeN
5ourWSk3Gw9W4ryVrT4s+nDsaeZItOEZiLaiQJuaD740j2LW1uS2RGaQ+K3mWkZo
rYHuY9PBRINVLYh4S74bvTqwk8OreRIrWhw+qKpYsjes3Yp/xxZdAR+SPkyx6/rG
0KoSisDVhzRmR+pOmndmgUvDmwIb6h6ZcyBhFJNYC6BZRH6SlWavTf4BABg1+jN1
5bEgGcvwgw==
-----END CERTIFICATE-----
Generated at Thu Apr 18 14:36:46 2024 by rpki-client on console-ams.rpki-client.org