Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.cer (raw, json)
Hash identifier: LkfzwHDUGXRDkq2XbTgSOumLaCSeFQq9i0TivOKIRLg=
Subject key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC56301495279289AFCAF690FEEFF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.208.252.0/22
IP: 2a0b:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:56:30:14:95:27:92:89:af:ca:f6:90:fe:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:fd:4c:f3:11:c5:1e:61:ae:a0:15:9a:8f:
bb:e8:0a:92:03:d5:0d:5f:cd:19:0f:bd:10:83:7e:
23:2f:34:7b:fc:8b:b9:8a:a2:9e:e2:5a:9b:94:19:
1f:41:44:a4:cb:87:26:01:59:54:2a:6e:ef:3d:dc:
7d:75:11:a0:13:e2:e9:c5:4d:3d:53:34:07:5c:39:
b7:79:cc:e3:88:0c:1c:3f:7c:88:85:fa:f3:b1:46:
51:ff:e8:8b:97:49:b3:94:d6:e8:2d:1b:ba:a9:a2:
38:91:bd:3d:2e:b5:9a:a8:0b:97:9d:c4:51:9d:4e:
09:1a:00:13:f8:31:ba:27:3d:5b:00:fd:15:0e:16:
20:1c:0d:26:2f:6c:fb:63:42:e8:ef:29:2f:f1:a6:
cc:5d:50:c4:b4:36:e8:af:a7:8b:5a:d8:35:70:7d:
6c:ac:22:ae:93:d9:41:ad:bc:7c:10:91:7d:56:7e:
99:ac:c7:1b:5f:e3:80:42:99:5b:29:22:00:5e:c2:
8a:c9:77:80:72:1f:bd:0f:f9:22:2a:01:44:31:62:
a2:5e:f2:e6:db:00:34:ed:2f:28:36:f0:9c:68:62:
84:29:08:95:7e:29:1a:9e:bd:a2:92:cc:ec:15:bb:
e5:4a:32:6f:dc:bc:36:38:c0:10:79:23:07:c3:8e:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.252.0/22
IPv6:
2a0b:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
58:58:fd:ba:87:f1:ad:aa:ac:8f:85:0a:3b:31:80:5b:76:5e:
92:e9:63:a2:bb:32:0b:8d:fd:c1:80:23:12:d9:72:70:75:60:
2a:57:50:10:2b:f3:8e:0f:48:2c:88:35:ac:94:99:6a:31:45:
df:c4:b3:5d:8f:a7:86:7e:ae:90:4c:4e:fb:28:62:1d:74:ca:
9f:b5:a7:50:06:74:a5:f1:f1:5e:c5:03:e5:cb:bc:a3:2e:d8:
f9:f5:63:bb:97:99:50:41:43:e1:51:57:75:a2:f0:f1:8e:9d:
69:8e:9b:04:4e:ac:e6:1a:ed:ad:62:ac:00:f8:4e:c3:0f:7b:
0a:82:f8:95:b5:cb:2f:79:c5:f9:62:46:f2:b4:89:32:b9:9f:
33:bd:0b:6e:38:0c:13:f6:89:31:ac:84:84:66:ec:3c:6b:50:
e5:57:7c:28:a1:0f:4c:b4:4b:89:e4:99:32:77:af:43:e2:35:
e5:bb:47:ff:2e:b8:8c:41:1d:cb:41:57:f3:45:c8:a3:08:34:
6d:a7:93:0d:d0:a6:22:75:e2:2b:44:55:80:71:c2:8f:94:06:
f4:39:e1:aa:20:60:25:ae:d6:65:c0:4d:62:d3:ab:ba:d9:e6:
ca:7a:07:4f:02:b7:43:53:0c:e2:e9:69:78:bd:33:04:ce:89:
ea:39:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:22:47 2024 by rpki-client on console-fra.rpki-client.org