Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
File: 3US-a6WvErbxcHhT3NrL2n5CISs.cer (raw, json)
Hash identifier: wnZ+oZeihCX03CsCYXQjS35uE+jo5gSt6++dCHmIRWg=
Subject key identifier: DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489305B0228ACAF6B8B807F8872EA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216460
IP: 2001:67c:1bbc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:93:05:b0:22:8a:ca:f6:b8:b8:07:f8:87:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:05:e6:d1:55:12:e6:a4:a2:15:a0:11:bc:
c5:69:6c:a9:0f:e6:71:5d:da:a6:ac:99:38:28:20:
d0:13:40:d7:ec:8e:df:28:dd:73:05:b1:5e:df:76:
53:21:98:00:6c:6b:f7:29:89:97:f9:ad:89:da:62:
16:84:9f:b4:05:b0:d6:2c:9a:b4:21:ea:7a:10:8c:
82:ea:7f:ee:30:92:ba:3c:76:9b:64:51:33:e2:e8:
ea:36:c5:1d:16:50:8e:b9:f6:51:0d:dd:a9:ec:0a:
2f:66:62:d5:52:99:6c:4e:c8:45:e9:99:91:22:ce:
e6:95:65:09:5d:01:fc:60:0f:a3:98:52:fc:52:e7:
40:a0:39:8e:ca:a8:06:3a:43:ca:36:5c:01:f4:28:
19:2f:47:d9:9d:40:d4:6c:d5:c6:8d:20:56:7e:95:
29:57:4f:a7:e2:5d:f7:ed:fe:a7:76:7a:47:a0:51:
fd:3f:19:60:1d:9a:e1:63:70:98:d7:b7:8f:a2:e7:
ea:0e:a2:91:ea:a3:ac:a8:08:33:15:b8:a3:0e:3a:
03:27:62:44:d5:9d:dc:08:be:f9:ba:74:18:0c:69:
b4:28:f9:49:19:02:cd:07:3e:42:87:40:c3:d3:97:
1f:fb:5f:68:2e:62:47:42:75:0c:a6:c1:bd:1b:c6:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bbc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216460
Signature Algorithm: sha256WithRSAEncryption
7a:9c:f6:69:4c:fe:60:06:4b:64:74:9f:d6:d3:7b:c2:d9:db:
45:66:47:20:2d:90:37:4c:77:be:1a:0a:0b:59:a0:88:f8:3c:
ef:bd:46:90:53:a5:a8:68:cf:74:48:58:47:4d:95:d3:39:64:
ad:4d:93:dd:33:b5:25:90:16:1c:78:94:51:c6:8f:a1:dd:dd:
07:0e:93:96:6c:c5:57:63:08:47:46:c1:26:3d:d3:81:9d:6b:
5b:7c:99:2e:b3:46:a5:70:b0:b4:31:0d:82:d3:16:2c:eb:0e:
fc:39:fb:70:b6:55:26:1f:7c:72:81:c4:32:aa:b4:90:df:55:
6c:86:7f:f3:6b:c5:50:5e:c8:e0:d8:0e:e7:a2:e1:7a:82:d6:
00:58:d2:9d:ad:54:13:d1:7e:ec:79:3a:b6:71:24:de:81:28:
5f:31:d1:b1:50:e8:a2:34:2f:67:05:60:f6:ea:32:b4:ac:d2:
29:f7:7e:9c:ca:e4:be:f1:eb:7c:c7:1f:f1:48:6e:f5:04:5e:
1f:52:56:0c:f9:4e:6a:18:76:91:db:62:47:ac:56:63:1e:95:
2a:22:e1:60:a5:94:f5:e8:c1:18:85:e4:3a:92:d2:07:07:2a:
34:b6:e5:72:01:0e:cb:f7:b4:6e:2d:42:56:17:36:f5:4d:a0:
94:e1:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:30:26 2024 by rpki-client on console-fra.rpki-client.org