Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
File: BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer (raw, json)
Hash identifier: CVpTycV7bzmbG2+Z0abdRU/QAjhFyqXbFub1zb1F678=
Subject key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B856B8DD147C4466EB6B6D9BB1B90B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.193.190.0/24
IP: 2a0d:b140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:56:b8:dd:14:7c:44:66:eb:6b:6d:9b:b1:b9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:b5:68:9f:ad:85:40:5c:4d:ba:11:9e:de:
ea:05:dc:31:d2:73:28:48:fd:ab:b6:c4:52:6c:25:
00:5d:9b:80:0f:09:3d:d8:de:91:f1:82:20:67:62:
8d:f7:8e:c9:f8:c8:54:3b:89:da:0b:5e:76:77:6b:
8f:89:f2:da:e0:b4:4d:d1:4b:cf:58:4d:4e:a7:92:
97:b7:73:fe:3f:ef:14:03:53:1e:8f:32:3d:68:d9:
c4:ed:3a:6b:76:a3:61:46:26:26:e0:3b:c7:53:12:
c9:8e:8e:47:9d:df:c6:c1:00:c5:4c:b4:f2:5b:0f:
f7:a2:8b:f3:04:e2:cb:1e:78:ed:4e:25:f4:ec:ad:
20:e2:03:f0:41:83:1a:f5:23:e7:28:fd:09:01:f9:
6e:98:dc:41:f2:10:70:da:a4:be:de:b8:d9:bc:70:
70:7f:e5:ad:64:d3:39:2c:1a:de:64:df:98:74:38:
26:0b:66:19:da:e6:db:f7:fb:62:87:58:8c:72:ea:
2e:81:20:a0:74:cf:95:25:3b:45:e0:ff:b5:78:c2:
8f:a6:b9:fe:59:bd:7d:43:37:14:d8:e6:b9:13:d6:
6a:ad:90:2c:0d:4c:49:5a:c5:79:c4:af:ae:01:4e:
c4:26:ce:8d:42:49:68:75:1b:12:45:a7:7d:48:7e:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.190.0/24
IPv6:
2a0d:b140::/29
Signature Algorithm: sha256WithRSAEncryption
95:16:cc:cf:e6:0f:18:73:57:65:53:5c:1e:8e:2b:c5:e5:40:
35:97:ca:99:1e:87:b1:5c:43:f1:2c:c4:a1:7c:19:9e:06:b4:
40:0f:5d:f2:cd:8f:18:d2:bf:d1:fc:9f:c1:79:2a:ff:29:87:
cc:d4:85:57:09:f2:34:2a:a4:07:e5:c1:f2:d2:9f:95:8e:76:
96:9c:1f:31:a9:96:35:72:8f:b2:67:76:0b:a1:af:dc:e4:d9:
79:f2:03:64:ca:aa:61:51:c8:ef:fd:ee:0e:4e:75:56:1b:37:
85:a8:37:16:3c:24:89:5d:d5:68:d1:7b:5f:cd:1b:b4:a2:05:
7a:57:64:1a:8a:ae:3e:77:98:89:0d:b5:77:a7:36:b9:c9:d2:
94:25:cb:10:03:17:75:e4:c8:38:d0:44:42:d4:b2:3a:ba:c6:
85:08:f3:09:41:39:e8:3f:b2:d1:13:52:0c:a5:10:54:f8:e9:
2d:70:86:da:28:23:96:41:34:f9:70:21:ca:80:73:f6:4e:93:
02:be:9c:d5:0a:db:94:2a:f9:33:2d:a1:3d:b5:7a:77:7d:f0:
f8:b5:38:b8:ea:cd:b0:6b:35:89:6e:c5:41:99:66:30:c4:ba:
26:c4:dd:42:f1:ad:4d:b8:77:d1:c3:b5:7b:cd:d0:96:5f:45:
22:d4:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:02:22 2024 by rpki-client on console-ams.rpki-client.org