Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer (raw, json)
Hash identifier: tV18bZp9Y5qcNeJ+AX8o33vb5lxBq9em+GTueRcES7E=
Subject key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF17116CC2532B1DFC9D31C0364004
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205914
IP: 185.72.16.0/22
IP: 2a03:3da0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:17:11:6c:c2:53:2b:1d:fc:9d:31:c0:36:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:ca:da:3a:88:f9:e9:00:da:ea:03:99:f3:
43:be:3b:77:4e:47:f6:b2:29:26:1a:ae:b1:0e:1a:
1c:28:cf:cc:9e:88:04:b3:c8:0d:c4:ae:a3:be:ba:
13:39:52:0b:14:94:c5:cd:d5:8a:89:48:10:d5:5f:
a2:c3:fb:bc:f3:29:30:42:77:64:9a:d3:3c:29:70:
99:7a:9e:60:67:6b:fd:c8:3e:98:aa:2a:18:d8:5f:
36:68:c5:b7:5f:98:cc:f6:d8:4c:6d:fa:9d:ab:d7:
bd:d9:ce:3a:8f:24:e9:7a:0a:ed:a0:7d:33:c2:19:
06:4f:80:c0:41:b5:b8:e5:ce:fc:1c:8e:51:ab:4c:
ae:50:16:8d:c6:92:5c:c4:99:89:7b:3a:42:91:f8:
b5:02:6d:01:e1:25:eb:d5:d2:44:4f:4a:63:aa:8e:
a0:6e:f1:98:de:91:36:e5:f0:e2:e2:0e:8f:43:db:
71:74:4e:55:94:9c:70:3d:08:e5:fd:ed:19:e5:38:
4f:ed:9a:39:20:49:3d:08:6a:60:d0:65:5d:cc:ee:
7a:34:1f:d9:be:b5:3a:6b:9a:cc:92:e9:fc:7b:b1:
6e:cd:55:5e:97:57:4b:0a:24:1b:a5:b3:b5:36:71:
39:2b:ae:3b:08:ab:a7:31:dc:82:ca:7e:fd:59:8c:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.16.0/22
IPv6:
2a03:3da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205914
Signature Algorithm: sha256WithRSAEncryption
a7:b9:25:46:50:fb:04:d3:3e:72:64:de:6b:52:bb:67:5d:b5:
3b:d7:43:46:89:33:f6:c7:1f:c6:3e:52:e8:df:81:f5:2c:0c:
7d:01:3c:80:4d:84:5c:6b:2f:60:62:f3:80:92:3d:88:11:d1:
25:9e:72:c9:7d:0d:55:42:5b:f6:8a:50:e5:06:e2:24:b4:fd:
2d:7f:cb:f5:2f:8a:a7:ca:36:81:9b:ea:1c:f7:dd:b4:77:9f:
7d:c6:61:1a:ac:43:1a:0c:fe:58:4c:e2:bd:7a:2e:c6:04:4e:
e9:f9:bd:48:99:57:0f:6e:fe:71:e0:95:d9:5c:48:bc:62:3a:
85:4d:e3:c3:32:7c:bb:22:9d:a4:3e:33:79:6b:e7:40:67:b2:
0d:80:1c:bc:da:39:3d:c4:21:e8:fc:e1:27:8f:14:f0:78:d2:
20:57:34:2b:67:2c:8f:4f:25:b0:bb:31:a4:f9:46:21:f7:00:
1e:f5:d9:6f:0c:da:4a:e4:24:3b:ec:35:ea:ac:f9:22:f7:26:
c6:8b:c5:ac:b8:5f:a8:e1:75:db:14:25:31:12:e0:ca:71:fc:
30:ba:19:e4:b3:77:44:3c:99:eb:bd:31:cf:9a:69:3b:ba:c9:
c1:3b:71:8c:92:54:a8:2a:a8:42:ad:bd:6f:e1:fe:30:ae:2e:
70:15:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:52:20 2024 by rpki-client on console-fra.rpki-client.org