Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.cer (raw, json)
Hash identifier: QAneuFnBD7yetzuhhPCJwmcJEFgLwEZVgmNFCNWktxs=
Subject key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7257C3F2DF279BA58F1CB6B04F58DFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57081
IP: 185.132.112.0/22
IP: 2a06:e180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7c:3f:2d:f2:79:ba:58:f1:cb:6b:04:f5:8d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:c3:f1:f8:14:f9:7a:7e:d1:9e:49:e0:07:
3a:ee:e3:83:6d:0d:21:57:04:26:35:52:79:a0:c5:
c5:54:b7:2e:63:13:b9:36:36:1f:e1:22:2f:e9:88:
61:35:fe:26:0b:6b:24:3a:ab:b5:79:c3:d3:40:8d:
32:e9:ca:c0:11:b8:de:f0:71:a8:df:dd:48:c9:32:
04:5b:36:0e:df:47:8b:bf:fd:0c:09:b0:5a:e0:b0:
02:67:68:e4:50:09:e9:9a:0d:7b:8a:2f:2b:9c:8b:
10:fb:e8:59:55:87:6b:df:82:8d:bc:b9:ea:8f:18:
6c:bf:4d:ec:6d:92:37:a7:d4:1c:6f:71:fa:42:b9:
38:c7:69:b5:2c:c4:c0:b2:44:7c:60:3b:80:77:1c:
1e:9d:a3:ef:e4:a5:d3:5b:a4:fa:5a:7f:b9:90:74:
0a:c7:da:69:cb:3c:19:68:13:f1:71:7c:db:05:6e:
54:72:15:a7:a4:5d:d7:76:80:d5:79:5f:b1:b2:dc:
c7:16:00:d1:dd:1c:bd:8c:6f:47:15:4c:0f:40:3a:
5e:58:9d:a2:c9:13:ec:61:69:1a:95:d0:30:cb:53:
ed:9a:e4:39:38:ff:91:3e:c1:6e:23:24:94:73:3b:
af:36:72:41:10:bf:94:76:82:95:4f:77:fe:10:1a:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.112.0/22
IPv6:
2a06:e180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57081
Signature Algorithm: sha256WithRSAEncryption
b1:ee:af:ec:bf:aa:3a:d8:88:13:06:ba:ed:d7:d5:f5:3f:4b:
25:59:62:5c:2d:77:c3:14:56:96:46:ff:3d:58:35:c0:7a:68:
5b:7c:52:f1:ec:2d:02:72:8a:02:76:fa:a7:c7:8e:32:e0:f7:
02:04:5b:b2:9a:83:5c:18:05:3c:e0:ab:7d:9f:53:52:13:44:
97:43:94:1d:72:00:3d:d8:fe:83:46:eb:0a:4e:e5:e3:82:2f:
a6:2a:73:f6:0b:a0:5f:ad:63:cc:c2:b3:4f:f5:04:9f:49:a4:
b2:63:4e:cd:f2:22:24:1e:18:37:5e:bb:65:72:03:b5:a9:fa:
e6:f0:c8:58:51:20:6f:0f:57:80:41:7c:22:e3:27:8c:67:1f:
14:10:7c:9e:f9:30:6b:f0:6e:b1:1f:68:d8:f8:ec:7a:f4:4b:
05:30:0b:6b:37:5f:db:51:0d:27:4c:2e:8b:ea:75:b9:69:6d:
54:aa:6d:01:ce:a2:e9:13:a6:55:b7:3d:53:c6:cb:17:18:48:
af:2d:95:7f:32:51:6d:e4:2f:ac:9d:ba:25:db:2c:9d:cd:d3:
74:e9:c3:16:2c:7d:ac:94:33:e6:23:32:3c:0f:ef:a4:e3:c1:
0a:6b:76:c1:ec:11:ce:ab:78:62:5e:16:10:f9:f9:03:99:58:
3c:a7:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:53 2024 by rpki-client on console-fra.rpki-client.org