Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer (raw, json)
Hash identifier: Xsjug8dOspmMeZpHPQz5irRgahNZAm58417GBhqH30g=
Subject key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D034E12C6251E9122B80CC7C0D48A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213392
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:03:4e:12:c6:25:1e:91:22:b8:0c:c7:c0:d4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:6c:e3:5c:0f:0a:f0:ff:f1:9c:5a:c9:22:
ed:4c:2b:52:bc:4f:bb:88:fc:92:24:fe:0e:06:9b:
d8:7a:75:61:5a:d8:ee:73:a0:0c:61:89:b3:36:4b:
0d:49:18:e6:c8:5e:63:62:1d:f9:8e:7c:d2:b0:0a:
b2:18:db:29:60:87:de:7a:8f:b0:c2:0c:41:fa:b3:
ff:c5:c0:9a:15:7a:bc:6f:48:c2:27:f9:77:db:55:
9f:ae:ae:01:9b:37:ae:b1:37:36:0c:43:9f:38:70:
46:53:46:7b:ff:f7:5e:03:43:cc:e1:9a:af:f8:ae:
32:e9:cc:59:a8:9c:3a:c3:4e:16:7e:b9:bd:8e:b5:
27:18:fb:b3:7c:15:f2:c5:22:9d:7d:cf:93:4c:f0:
45:9b:8b:bd:4a:54:0f:d5:68:54:68:f5:84:67:6f:
de:f5:0d:a5:8c:fe:5f:45:4e:78:c9:75:ee:42:53:
23:34:c3:db:1e:83:39:42:66:b3:43:2b:fd:33:99:
f5:47:21:8d:0e:95:8d:a0:55:50:85:d0:b5:a8:26:
5d:b9:7f:38:7b:2a:f6:ef:c2:ca:36:74:c5:11:46:
13:05:13:ce:43:1a:2e:20:b9:d9:30:d8:4d:55:c1:
1e:eb:ab:83:bb:c7:72:a9:f7:1e:ad:7c:fb:ed:05:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213392
Signature Algorithm: sha256WithRSAEncryption
a0:a7:e4:71:1b:49:20:1b:ac:ea:11:95:29:0d:14:c5:09:c5:
3c:6c:47:e6:11:65:15:7f:9b:e5:e7:c2:60:91:14:79:db:fd:
d0:17:c8:ee:d9:e2:07:89:fe:ec:fb:02:e2:bb:d0:3e:91:18:
e9:e1:31:9a:7a:0a:f7:93:49:a5:ef:a1:fb:a5:45:0a:e9:f3:
be:11:c3:fa:64:bf:83:cf:15:b5:ef:dc:52:53:cf:79:b5:15:
5d:21:45:b1:02:9e:04:e7:f8:93:14:16:43:83:20:bf:9b:42:
c5:12:e7:71:b6:2f:ce:65:99:6a:fa:dd:cc:85:56:dc:a7:6d:
24:89:43:03:55:34:38:2e:95:1e:f0:21:14:1e:23:63:c2:bc:
b8:e7:c4:bf:68:f9:ac:e4:05:fd:84:09:fd:0d:99:39:8b:f5:
1a:9e:15:43:4c:68:db:83:49:0f:a7:4e:20:6f:64:71:c3:3a:
e9:7f:36:f9:40:52:66:f0:4b:e6:4d:7e:be:ba:7a:77:b6:1b:
d3:17:13:a9:4c:31:7f:f6:5f:e7:c0:46:75:7e:3e:2c:2b:4f:
54:34:f4:8d:fd:0c:fe:1d:78:dd:c6:0d:01:d3:0e:d4:08:72:
ad:42:00:a8:1a:af:25:02:9e:03:c5:5d:e3:23:a1:35:c2:c2:
83:13:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:56:03 2024 by rpki-client on console-fra.rpki-client.org