Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer (raw, json)
Hash identifier: 25NovcwziInfswbtFP4AYcsjO/sbdm3fgV6onc55q5s=
Subject key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276CDBEFAF433F5ED6793C0E1D1EDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209256
IP: 217.20.96.0/20
IP: 2a0a:34c0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6c:db:ef:af:43:3f:5e:d6:79:3c:0e:1d:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77549551405d9948c662dfe4de24de055daff5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:15:5e:25:ed:a1:e8:b0:fb:08:ed:ff:b9:
b6:68:16:11:cf:48:74:bf:89:a6:65:f7:e7:45:a5:
58:48:d9:33:84:a8:7f:d1:e4:8b:4f:1f:9b:c9:09:
d4:fe:7c:87:5d:65:23:0c:66:d3:55:de:37:c5:11:
30:96:74:12:7c:ee:98:1a:24:34:22:c1:46:85:c1:
20:fa:73:1e:6b:b1:76:c2:ce:7b:94:8b:8d:82:f3:
a7:d8:8b:5d:02:e2:70:f6:84:80:88:b8:33:aa:e6:
b7:23:36:59:17:ed:b6:83:16:61:c9:79:9d:8f:97:
ea:ef:70:d1:0a:47:a1:e7:e4:53:c4:96:96:74:fc:
94:42:e8:ef:73:b1:8e:cb:93:07:b2:6d:6f:79:e5:
2f:76:c3:af:1d:96:0a:e1:02:4f:97:e6:3c:5a:56:
57:84:b9:d9:9d:e4:c1:34:fa:2d:31:78:79:c2:aa:
44:47:91:21:4c:3e:d8:4b:4a:65:20:5e:25:3e:38:
d7:5c:99:f6:d8:f0:89:4a:40:1d:5d:32:f2:20:2a:
c7:ee:df:b3:1e:59:c4:dd:04:a8:fb:93:b2:0f:2c:
23:f9:2d:c8:d1:23:7a:48:f7:89:ed:23:3b:75:d5:
fc:44:4c:76:6b:fc:34:78:e6:c5:d5:f9:fb:ab:79:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.96.0/20
IPv6:
2a0a:34c0::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209256
Signature Algorithm: sha256WithRSAEncryption
6d:1a:0f:2f:3d:45:c8:75:fc:b8:95:52:85:26:60:6d:23:52:
c9:ad:44:1e:56:f1:dd:5d:cc:d3:9f:c2:69:9f:2f:37:72:43:
f1:9f:2c:49:57:1a:ec:b5:75:f8:fd:95:1f:df:ea:0b:0b:2c:
da:86:94:51:18:90:4c:c5:47:69:21:ab:5d:e0:3f:41:3e:55:
9a:c4:77:b3:e6:3a:57:35:48:e6:c7:d7:59:1a:9e:b6:d8:56:
37:b1:0d:61:c7:b9:51:c2:e7:1d:33:86:9c:4e:d5:6e:1d:86:
b1:1b:26:10:66:38:20:fe:ac:e1:4c:18:09:37:a9:f4:13:7a:
77:a4:61:28:58:c8:d1:a3:70:01:12:23:ee:ac:e2:a7:59:f1:
5b:1b:50:be:9d:07:99:c2:f5:a8:48:0f:cb:3e:6f:ec:e2:1e:
3e:bf:1d:92:01:16:5a:4b:aa:e4:10:db:c0:cc:88:07:5e:cb:
a5:60:dc:68:73:87:22:10:05:ef:4a:a2:d3:b1:f3:45:85:b2:
c0:cd:7e:8c:6e:14:1b:2e:a4:4c:02:b4:3d:c7:21:35:26:94:
3d:7d:c1:4c:0a:46:be:c5:56:0e:82:e3:73:ec:ea:74:38:a6:
b6:43:25:a7:70:4e:3e:09:a2:24:f6:8a:28:64:bf:50:cc:73:
7f:5d:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:48 2024 by rpki-client on console-fra.rpki-client.org