Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer (raw, json)
Hash identifier: 8whNiLDDnupWHXDxSLCxtICrl9L+BPCprorJU8tDxGQ=
Subject key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348F3D5D4BB1558FA3F8BD529320C1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 79.170.64.0/21
IP: 87.237.80.0/21
IP: 185.186.200.0/22
IP: 2001:1a58::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f3:d5:d4:bb:15:58:fa:3f:8b:d5:29:32:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:96:6f:d9:b1:9f:0d:a4:cf:9b:e1:7c:71:2d:
ef:de:a2:4a:75:24:97:32:44:49:57:4d:f1:72:1e:
ae:3c:aa:3a:c8:82:d2:1c:fb:d4:3d:cf:18:35:18:
21:76:43:11:4b:2c:f4:ec:22:01:e3:7a:91:30:6e:
ab:e7:dc:b3:35:86:44:ff:be:61:5c:9d:80:1a:84:
51:07:e8:51:dd:c0:d3:28:5e:07:45:7b:55:8b:4a:
85:bd:99:a1:39:1b:0c:59:b0:c7:0e:b1:94:ee:bd:
b6:58:77:a8:87:bb:c8:92:7f:3e:07:6a:7e:70:e8:
d5:70:83:1d:6b:b2:1a:57:95:bf:11:9f:ee:1c:f1:
fe:50:98:91:7c:15:e1:5d:8d:e2:0e:62:38:3d:44:
f7:06:e1:e3:40:5c:be:6a:b0:43:d1:21:e3:bf:9a:
5c:34:ef:ce:7d:ef:7d:95:3c:2c:8b:cb:d4:b7:9e:
fe:3a:b0:35:58:9d:fa:46:9a:2d:29:b6:71:cd:43:
83:7a:ab:60:f9:89:2a:0e:36:df:1f:fa:a7:40:16:
34:50:bf:d4:c7:e5:9f:88:6e:49:fd:4b:bb:0a:55:
e0:fc:53:a5:d3:e9:4b:cd:e0:d0:4d:e8:35:e0:88:
9f:57:a3:6b:53:f2:85:9a:f3:33:a9:fb:76:5d:1c:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.64.0/21
87.237.80.0/21
185.186.200.0/22
IPv6:
2001:1a58::/32
Signature Algorithm: sha256WithRSAEncryption
24:0e:cb:0a:0c:96:4d:fb:42:13:24:79:97:12:1f:31:c5:89:
95:75:44:d1:a7:c1:d1:5a:cb:d3:95:a9:d9:e9:1f:ce:4c:35:
eb:f6:1e:db:bf:1d:b6:39:56:fe:6a:c2:31:62:c4:54:f3:dc:
7a:c5:d5:65:ae:03:30:79:57:ed:a0:ef:21:49:60:c2:27:57:
ee:29:3f:4a:bf:72:3e:92:0d:8b:43:11:bf:54:a6:16:ea:b9:
80:b7:d9:a6:d6:8f:c6:3a:1b:be:9c:4f:98:57:73:6f:19:47:
07:7e:5c:a7:70:00:f0:19:26:5d:21:cc:b9:77:47:2e:8e:16:
43:2d:a0:dc:cb:fd:d3:9e:16:26:68:09:82:db:93:6e:2e:ea:
19:69:5c:f1:9a:a4:91:65:47:bf:08:85:45:ee:35:7f:6c:24:
ba:da:f0:f6:08:70:1f:dc:e6:45:4d:64:85:b6:5d:c5:9e:c5:
22:5d:41:e7:93:b3:ba:af:b3:54:a6:2b:40:d6:59:0a:a3:23:
37:ed:98:3d:f7:55:7c:d3:39:54:8a:11:bd:56:1b:ba:a2:9f:
61:88:87:fd:b9:da:c4:81:99:2e:03:df:11:bc:d7:36:ac:d1:
40:63:a5:63:c0:ab:13:ee:83:cf:35:48:73:bc:75:1c:60:16:
8e:df:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 10:20:07 2024 by rpki-client on console-fra.rpki-client.org