Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.cer (raw, json)
Hash identifier: kPaVMKJMmiEsOlKnoVpxbHJ4x5BkdTYmU4yLnlpFWWw=
Subject key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49356A444814B5CD69AAF65AEEAD678
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211392
IP: 91.192.106.0/23
IP: 91.193.58.0/23
IP: 193.106.189.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 16:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:56:a4:44:81:4b:5c:d6:9a:af:65:ae:ea:d6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:55:a8:53:fc:20:8e:32:38:d7:8d:25:72:
42:66:f8:37:90:41:65:53:e4:21:d3:c9:fd:0f:ff:
78:cf:74:b2:28:0e:ff:51:18:33:95:85:c5:c4:62:
a5:bb:f0:a2:e3:7d:a9:1e:cf:6d:2c:74:db:9e:08:
1b:2d:ee:6b:ed:bc:96:bf:60:f0:1e:15:45:eb:99:
1f:ab:4d:b6:ef:c2:cb:33:e6:83:1c:07:b7:32:2b:
24:ab:8e:47:9d:a7:3f:c7:1d:bb:21:37:b2:4c:64:
54:ff:f0:1b:d6:ca:7d:02:3f:3e:66:0f:f1:d6:59:
2d:53:5b:5b:f2:46:5f:e1:55:8f:d6:4f:3d:ba:f1:
5e:ad:13:9a:30:18:3c:82:89:48:e2:12:74:a6:9a:
1d:77:fd:fb:12:fb:1e:4d:3e:cc:bd:eb:bd:64:ec:
80:34:8a:b4:e1:0b:cd:3b:58:47:50:33:4d:c9:df:
75:48:1a:81:46:de:b7:33:88:86:4d:b5:b1:0b:38:
9a:77:3f:3e:53:7a:fb:20:75:5b:6e:8c:de:a9:a4:
01:e1:54:d2:7d:98:59:63:be:87:22:83:33:95:89:
74:c7:50:79:a2:b2:37:3a:45:2f:74:af:2c:cb:7e:
fd:45:fe:c7:6c:7a:67:99:7e:b3:c5:4d:15:80:c3:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
193.106.189.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211392
Signature Algorithm: sha256WithRSAEncryption
48:ab:43:fb:a5:04:95:ec:4e:ba:06:86:23:89:bf:1f:25:1e:
87:20:ed:2e:9d:45:f7:b7:ea:db:da:a3:60:17:0f:a4:23:7d:
c6:62:51:94:64:22:1f:ae:18:40:e6:05:89:af:a0:cd:47:59:
cf:e6:6d:46:72:28:1a:3a:07:13:a7:84:41:9e:c6:ed:b0:75:
f7:c9:f9:43:6b:5f:47:06:4e:c1:b1:fb:a6:44:b8:df:eb:d7:
89:38:2d:e9:10:28:9c:48:c8:de:ab:ee:c1:91:e6:d9:e7:1d:
17:25:b8:97:a0:80:b8:c4:f2:45:e4:74:aa:22:c6:92:98:84:
a8:64:1c:bb:9e:84:93:63:f7:c1:e3:c7:fb:ce:f4:8e:dc:b2:
16:fb:6b:69:b5:34:13:5b:e4:c9:53:d7:b6:02:3b:00:59:8e:
6f:b4:b5:14:14:97:a0:d2:aa:59:02:21:c5:88:6d:d0:b0:16:
d2:d7:7a:b1:bb:e0:c1:b3:b0:2e:c5:a0:a0:63:47:2d:0c:c9:
70:6c:55:97:b1:53:ab:8d:5d:d8:b9:ff:a2:3a:6c:ce:02:06:
a9:8d:0b:0d:8c:6f:c4:a0:a3:b5:9c:19:4e:ee:52:47:19:e3:
e6:d6:11:2b:71:23:d7:c1:43:2c:e6:cd:d0:4e:a9:ac:3c:20:
54:b9:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 18:47:11 2024 by rpki-client on console-fra.rpki-client.org