Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.cer (raw, json)
Hash identifier: J6XgcM/AKDHmJeayORde+IKUaP7ZY/+R9gak8ys49xU=
Subject key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D85DA6AC012B42F2407FA435FE48B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8540
AS: 205629
IP: 185.211.216.0/22
IP: 185.228.32.0/22
IP: 2a0b:6c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:85:da:6a:c0:12:b4:2f:24:07:fa:43:5f:e4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de63eb6319ba454d397645945ce5439576fac741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:96:5f:b9:14:f9:bb:00:49:82:bb:0a:03:
f6:f5:4f:7f:c5:63:4b:29:2c:e4:de:78:8d:18:65:
97:2e:1d:bd:b9:2d:71:a2:c8:a2:05:91:e3:bf:8e:
a6:dd:e0:83:cb:77:da:65:9c:96:e2:82:e9:35:54:
5f:ef:24:6e:50:55:f9:db:5e:51:dc:bf:cd:18:ac:
7b:48:60:09:6f:fb:9a:c9:ad:b7:86:53:4e:d6:56:
07:f9:74:ba:e7:43:14:f0:22:2d:15:1b:f8:6b:52:
8e:8a:a7:3d:a5:42:68:4f:ff:82:c7:3e:81:c1:e8:
4d:6c:93:91:fd:99:2d:2f:14:4e:c0:2e:db:7a:1f:
af:08:89:7b:13:8d:ba:57:19:cc:c3:37:94:bf:6f:
c8:65:2e:ab:73:81:50:f3:1d:dd:f1:d2:7b:7a:4b:
e4:8f:b2:04:30:8a:83:76:d3:ef:c3:c2:23:df:ba:
27:6f:8d:a5:46:af:fa:ec:c9:97:56:a2:d5:b9:6c:
0e:c0:f8:8b:e3:a7:11:f2:9c:25:c5:75:92:39:0c:
a7:cc:64:3f:35:a1:e6:c9:c2:29:23:ef:b9:64:d0:
23:a4:ef:0d:66:ec:4d:b4:7e:93:57:44:de:2a:f9:
52:d5:e6:b1:d6:58:cc:34:28:ae:df:2d:a5:bd:bc:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.216.0/22
185.228.32.0/22
IPv6:
2a0b:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8540
205629
Signature Algorithm: sha256WithRSAEncryption
30:5a:bc:95:89:05:aa:bd:d2:7c:fa:37:30:95:18:55:d3:b6:
a0:42:73:7d:3e:99:36:05:8d:e8:7b:43:80:6c:7a:93:47:62:
fa:8a:08:68:fb:10:22:62:80:56:aa:cc:1b:27:40:90:a2:90:
7a:36:03:d5:50:9f:59:2a:a4:91:6b:16:e1:c8:43:01:b1:41:
47:ea:4f:20:f4:53:05:16:7c:9f:cd:62:a7:96:b4:0a:84:67:
ae:65:9e:0f:26:cf:1d:41:5c:7e:6f:cc:1a:92:42:24:b2:f3:
f3:3a:52:07:51:0d:62:99:dc:f1:56:8f:6b:44:00:44:f4:d2:
1d:86:ac:5a:8b:4f:76:9e:d2:97:1e:93:28:71:06:da:3d:a6:
c0:2f:26:3e:c9:3a:2a:96:2b:fe:e6:a4:07:22:e0:81:76:01:
7f:eb:12:79:14:92:35:5f:6e:fe:19:9b:16:d5:ac:f9:07:48:
f6:0b:6e:3d:75:ca:15:30:65:0f:1f:3f:91:d9:a3:55:22:08:
a9:37:b8:bf:8d:56:f9:7a:0c:46:b1:94:a5:f9:ed:f2:72:92:
bc:fa:22:43:ad:cd:74:34:0f:f2:2f:e1:4e:61:66:f9:4c:2f:
f6:ca:1b:a4:bf:a9:ed:b8:f3:a5:e3:94:c0:10:69:65:76:2c:
90:ed:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:26 2024 by rpki-client on console-fra.rpki-client.org