Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fw3BR47gbs3LNsXkzYNnMZHMvvI.cer
File: fw3BR47gbs3LNsXkzYNnMZHMvvI.cer (raw, json)
Hash identifier: n/024Y/t48Ua2vm/rNb3gDeLP7SPmccCX634wNUbNQs=
Subject key identifier: 7F:0D:C1:47:8E:E0:6E:CD:CB:36:C5:E4:CD:83:67:31:91:CC:BE:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC408836B35449396E1B772CDFC600CCB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 07:59:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215885
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:08:83:6b:35:44:93:96:e1:b7:72:cd:fc:60:0c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f0dc1478ee06ecdcb36c5e4cd83673191ccbef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:6e:95:f5:a8:32:ce:38:86:9a:54:0e:c0:
99:0a:f2:72:d7:db:6d:ff:b2:44:75:01:cc:ba:b4:
77:45:84:b4:26:80:7a:f5:41:1a:4d:41:79:bd:47:
07:dd:0d:f4:09:c0:ff:fb:4d:09:87:b5:cd:47:5a:
7b:ea:e2:ea:65:7d:c7:15:d7:69:ef:1d:e9:16:5c:
59:05:ce:46:15:f5:fd:8c:b9:28:14:28:6e:f4:48:
0c:d2:c6:5b:08:e6:00:40:b7:0d:52:aa:1a:a1:16:
be:e9:0f:03:a6:b3:fd:b6:36:89:99:28:b7:4f:3d:
a5:49:1b:89:47:66:f8:ff:a1:e6:45:65:ab:17:b7:
2b:19:ac:2e:1c:90:e1:4b:7f:46:be:c0:80:61:93:
6e:4f:a9:2f:c2:fd:6c:bc:b5:25:ca:98:c5:0d:75:
9a:63:2c:ef:b4:55:95:67:1f:b3:cc:2a:96:f4:74:
2b:27:06:71:6b:e5:6a:bb:9d:77:e3:47:57:b2:12:
59:2e:23:b2:5e:55:2c:fa:12:82:82:c4:51:f1:ff:
b4:ba:ad:96:9b:5c:4e:a6:b8:93:70:bc:1b:14:65:
74:14:80:64:ad:a1:a3:d4:80:1d:8c:b5:ef:58:4b:
54:ae:3c:69:1f:5c:ff:b4:e1:a1:79:a5:12:43:bf:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:C1:47:8E:E0:6E:CD:CB:36:C5:E4:CD:83:67:31:91:CC:BE:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215885
Signature Algorithm: sha256WithRSAEncryption
a1:74:35:13:a7:d3:b9:67:b7:02:ed:24:af:35:66:f0:8b:f2:
97:6a:1c:1a:0c:43:b1:49:a1:e6:e6:ff:cc:85:ec:d5:10:21:
1a:4c:57:df:6b:88:44:3e:32:6a:8e:77:fc:b1:1d:3a:2f:43:
f0:e3:d0:1d:17:f7:d7:0a:49:50:9d:66:a6:a4:b5:19:ba:09:
96:67:cb:90:a6:ee:19:65:4b:a9:eb:69:1c:f4:6c:ac:e1:78:
87:9b:13:92:7b:be:93:ac:f4:7f:62:79:55:47:08:c8:a9:7c:
cb:34:34:a6:0f:4d:62:35:98:71:d0:de:a5:3c:a9:e0:66:67:
25:a6:02:e6:d6:97:6c:84:bc:72:58:3b:6c:6a:7f:d0:93:dc:
18:af:04:98:a9:32:db:4b:64:36:37:a2:36:54:dd:d8:e5:8d:
3f:38:1e:bd:8b:69:1c:a7:e3:b0:f7:4f:f7:39:c9:d6:6e:88:
d2:99:55:92:59:dd:30:83:69:a5:6e:13:10:15:54:9d:c7:3f:
c8:b9:51:37:88:1f:a4:1f:4b:ab:6e:9b:52:63:be:a1:6f:42:
17:b4:e7:a4:2e:c5:57:72:b8:b4:1f:f4:65:04:14:9b:9c:5c:
8e:01:94:82:74:02:2b:c0:12:f4:52:7d:98:82:a4:17:b9:ba:
b9:6a:04:8f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzECINrNUSTluG3cs38YAzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDc1OTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjBkYzE0NzhlZTA2ZWNkY2IzNmM1ZTRjZDgzNjczMTkxY2NiZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWdulfWoMs44hppUDsCZCvJy19tt
/7JEdQHMurR3RYS0JoB69UEaTUF5vUcH3Q30CcD/+00Jh7XNR1p76uLqZX3HFddp
7x3pFlxZBc5GFfX9jLkoFChu9EgM0sZbCOYAQLcNUqoaoRa+6Q8DprP9tjaJmSi3
Tz2lSRuJR2b4/6HmRWWrF7crGawuHJDhS39GvsCAYZNuT6kvwv1svLUlypjFDXWa
YyzvtFWVZx+zzCqW9HQrJwZxa+Vqu51340dXshJZLiOyXlUs+hKCgsRR8f+0uq2W
m1xOpriTcLwbFGV0FIBkraGj1IAdjLXvWEtUrjxpH1z/tOGheaUSQ79J5wIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFH8NwUeO4G7NyzbF5M2DZzGRzL7yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E2ZTc3
ODYzLTVmN2UtNGY1My1iYzM2LTg4N2QxNjE2ZjgyOC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTZl
Nzc4NjMtNWY3ZS00ZjUzLWJjMzYtODg3ZDE2MTZmODI4LzAvN0YwREMxNDc4RUUw
NkVDRENCMzZDNUU0Q0Q4MzY3MzE5MUNDQkVGMi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDS00w
DQYJKoZIhvcNAQELBQADggEBAKF0NROn07lntwLtJK81ZvCL8pdqHBoMQ7FJoebm
/8yF7NUQIRpMV99riEQ+MmqOd/yxHTovQ/Dj0B0X99cKSVCdZqaktRm6CZZny5Cm
7hllS6nraRz0bKzheIebE5J7vpOs9H9ieVVHCMipfMs0NKYPTWI1mHHQ3qU8qeBm
ZyWmAubWl2yEvHJYO2xqf9CT3BivBJipMttLZDY3ojZU3djljT84Hr2LaRyn47D3
T/c5ydZuiNKZVZJZ3TCDaaVuExAVVJ3HP8i5UTeIH6QfS6tum1JjvqFvQhe056Qu
xVdyuLQf9GUEFJucXI4BlIJ0AivAEvRSfZiCpBe5urlqBI8=
-----END CERTIFICATE-----
Generated at Fri May 3 10:50:57 2024 by rpki-client on console-fra.rpki-client.org