Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.cer (raw, json)
Hash identifier: 8vrL4LnWfAT6XxcYzlCanXxRSgkxGynlOVVjRKMADvk=
Subject key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B53CBB95D7835AEF3666679FC9890
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207534
IP: 212.6.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:53:cb:b9:5d:78:35:ae:f3:66:66:79:fc:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:82:df:cd:84:dd:a1:99:29:f5:cc:79:8b:
9b:4a:25:7e:2c:94:99:2b:99:e6:47:7c:9c:4c:c3:
ac:24:40:e1:90:41:7f:98:a1:d9:10:a6:09:64:ee:
dc:11:6c:51:a4:92:4b:8a:4b:3d:72:70:a3:48:f1:
c2:52:d0:f3:f6:c3:2f:e9:62:b7:94:7d:c1:e9:76:
ae:06:64:26:08:05:02:de:0e:50:b6:e8:09:e6:aa:
71:a5:7e:dd:89:9a:ae:8c:ac:1e:4d:b5:37:9d:d5:
3d:b0:c4:bf:73:9e:5a:c9:17:d7:29:95:fb:99:bc:
ee:b0:dd:75:fb:97:c1:25:30:aa:d8:cd:db:5c:55:
3c:8a:eb:a8:d2:77:8a:e4:76:ac:c2:b6:67:09:39:
4d:3d:04:0e:26:a3:81:25:64:4f:48:54:42:16:e5:
d5:bd:80:d9:df:36:78:34:fb:9a:41:7c:fc:b1:fe:
03:09:0d:9e:96:a2:a2:c3:76:b5:a3:3e:4d:01:e8:
c1:6c:97:a4:fa:eb:8b:01:d2:e5:1e:7d:89:90:e4:
7d:15:84:22:95:46:c9:dd:7a:be:35:90:a2:00:ae:
4b:23:e7:a4:fc:d5:72:06:17:0b:7e:61:85:c1:0b:
b9:fe:24:c3:80:3b:99:67:d2:b8:65:2b:e6:75:14:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.33.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207534
Signature Algorithm: sha256WithRSAEncryption
a9:de:e2:2e:72:89:22:8e:db:e8:cc:38:fc:ce:68:24:11:af:
25:38:f7:d5:6f:3c:f9:d7:f9:5f:5a:e5:e1:80:58:11:49:a0:
ee:6a:98:5f:3d:c1:73:da:ea:72:8a:3b:f5:ba:da:44:2c:92:
97:c5:86:3e:c4:c6:a9:56:f7:6a:1e:51:b8:2d:3b:d5:9a:1e:
a5:79:f0:c8:3d:87:7a:6d:7b:9f:c6:8d:c8:a0:a7:92:88:1c:
87:35:8f:c4:01:23:1d:4a:a0:cd:91:23:25:70:70:99:5f:4c:
8f:d4:76:06:eb:df:90:25:04:80:54:4d:60:37:dc:43:5a:8a:
5f:61:00:f9:da:aa:4b:b7:3f:a6:a7:a9:8d:e0:23:52:f4:a6:
e0:65:2b:14:32:3b:45:37:e1:67:12:c4:ef:13:cd:87:e3:56:
fb:3b:24:d1:67:ed:66:86:e8:a6:76:19:e9:bc:0d:64:92:0b:
ce:99:bb:24:5c:28:88:c1:a7:94:bb:81:f7:a6:c7:ff:cb:bc:
91:46:eb:c1:49:28:2d:bd:b5:fe:6a:7b:1b:7c:6c:8d:64:4a:
3e:12:7d:cf:19:90:fa:3d:53:1f:56:60:2b:9e:84:e8:f2:ce:
ae:5e:f3:63:b8:9e:ad:98:f1:7e:f3:53:ce:52:7f:3d:c2:8d:
4a:34:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 01:25:27 2024 by rpki-client on console-ams.rpki-client.org