Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
File: Po3UOSjt-xIA77xixEH5zSkEhYU.cer (raw, json)
Hash identifier: T1Ia97Jpge3IJ7X1HtF5AHutdc6oYcPqJYRzEDHV5t0=
Subject key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348DC3194BA188EBF80EBDC1FFFEB56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60049
IP: 185.57.232.0/22
IP: 2a02:46e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dc:31:94:ba:18:8e:bf:80:eb:dc:1f:ff:eb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:b4:78:0a:ab:33:fe:2c:55:63:01:3a:7b:
73:c7:99:19:75:d5:15:77:88:4c:00:dd:92:65:fe:
67:8f:75:83:a8:68:34:62:12:88:51:f7:f5:01:cd:
ed:d7:16:3d:18:7e:b4:6a:e9:f6:7f:6b:46:0f:89:
14:64:85:9d:ef:7e:e4:95:16:8e:7b:43:8b:ad:9b:
71:04:de:53:15:23:87:35:43:6b:f4:cc:c6:6a:33:
d8:4d:96:ae:bd:67:26:46:fa:c2:ad:82:1c:10:3b:
da:27:b5:c8:bd:b5:56:dd:38:eb:5f:d5:0a:3e:d9:
3b:fc:d7:9a:4b:b1:fc:7f:7d:1c:82:8d:ba:9d:f8:
48:6e:34:3b:e0:87:b2:82:5c:79:96:01:55:74:33:
c7:91:8b:ab:1b:e2:49:5f:84:dd:62:13:e8:ad:41:
fd:85:ab:a7:66:ab:83:5d:37:b3:86:f4:19:a5:1b:
22:91:95:d1:82:0c:36:ad:57:01:75:eb:d8:3f:e1:
98:4e:c6:bb:05:8d:c6:b6:dc:7d:5a:82:59:4d:73:
03:df:71:08:e8:ae:dc:20:ec:1b:a5:da:90:f3:da:
b5:c9:ae:43:b1:ca:2d:0c:88:fc:29:c8:ed:36:49:
bc:49:96:78:8c:ab:92:56:68:6c:01:68:29:9f:17:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.232.0/22
IPv6:
2a02:46e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60049
Signature Algorithm: sha256WithRSAEncryption
a2:dd:ac:c3:60:8c:b0:17:a2:ef:bf:e3:ab:39:8f:19:eb:ee:
83:51:46:d5:fa:c0:67:8a:eb:71:b6:2f:aa:4f:e7:8d:79:d0:
1b:84:d2:c5:37:8e:a4:90:6b:32:26:68:ed:a6:0d:37:79:18:
30:67:93:c0:cc:b5:63:48:84:b5:c4:04:bf:4d:5a:54:a3:13:
82:dc:ae:88:a1:41:15:f9:e0:4d:6e:db:9e:77:18:ea:b0:4e:
64:13:db:9e:31:45:84:d8:49:9e:d0:22:56:61:9f:90:7d:81:
56:e9:45:19:93:bc:db:99:6f:a4:04:86:5d:68:ec:6c:40:9b:
bb:c6:48:bd:62:e1:77:4c:c2:fb:10:42:41:8f:c8:df:6b:5c:
ff:39:33:af:73:56:4b:14:5b:a4:73:45:3a:f8:5c:f6:c1:c6:
12:7c:f6:f3:15:f2:e4:5f:8f:cf:ec:34:be:59:d0:19:cd:10:
54:5f:1f:a8:a2:f8:43:28:fe:b1:f5:ea:88:c7:52:17:ed:35:
28:eb:d8:2b:28:72:15:e0:f0:61:95:36:0f:a3:fe:2d:5e:10:
74:9a:8b:70:0b:d3:2b:bb:57:df:3f:78:49:46:17:b4:c0:eb:
06:5c:f0:66:4f:ed:6b:6a:4d:ee:2e:86:78:86:72:fb:d4:ec:
d2:d4:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:59 2024 by rpki-client on console-fra.rpki-client.org