Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
File: V-L2mlyy1YBNIamwRboxSusaqh8.cer (raw, json)
Hash identifier: vEJM6zIl5d8LCbzzy2ebFrPIPJWRuA4z1O/D45VOiAI=
Subject key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424FEE6E22FB60865F859E08115C9C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41951
IP: 109.205.224.0/21
IP: 2a01:5180::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fe:e6:e2:2f:b6:08:65:f8:59:e0:81:15:c9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:fe:aa:3e:da:56:30:17:80:7d:7a:bf:0e:
9a:e3:e6:8f:61:27:aa:72:69:1a:32:10:6f:fa:72:
e6:df:c5:a3:96:a5:82:b7:da:03:22:ce:38:29:28:
43:c1:bd:c4:b0:1b:6e:3f:c1:90:aa:06:c0:67:7d:
98:c2:c6:03:7a:3a:f2:e3:be:18:24:d3:ad:23:b4:
dc:a0:e4:c9:37:71:b4:aa:8d:61:4c:35:9d:0f:55:
01:14:b3:55:6f:a3:b2:1d:63:fb:9c:03:a9:29:2e:
3c:5c:c3:b4:71:14:3a:6e:0f:72:ff:c0:04:b3:d6:
a7:fe:b3:4a:1d:fc:e0:a9:d6:cc:3c:2f:7f:66:ba:
54:63:b7:d5:3b:f5:1e:4c:6e:b2:fa:0b:5d:b1:24:
3f:a6:8f:cf:06:e2:76:81:5c:ab:ab:fb:23:d6:9b:
59:5a:53:17:70:89:c2:18:6d:3e:9b:2b:4b:43:f8:
7d:e8:57:f2:a3:59:dc:7d:dd:07:eb:9c:08:f2:96:
e5:8a:36:d1:f3:ca:e9:34:0b:96:96:5a:ce:1b:7e:
30:7a:4b:c1:e5:c8:82:30:91:9d:59:ce:f5:6b:f7:
e4:bc:d0:24:f7:ec:05:17:e6:9a:8f:0d:39:7e:71:
8b:2e:8a:1f:07:82:72:b5:31:3e:b9:c5:09:8c:23:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.224.0/21
IPv6:
2a01:5180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41951
Signature Algorithm: sha256WithRSAEncryption
25:19:d5:33:41:37:93:a6:2a:c7:e8:21:cd:bc:df:6d:52:39:
65:10:94:5b:c6:64:1c:78:1a:48:34:f2:73:64:00:91:45:26:
8d:5f:69:e0:e1:81:67:f5:19:c4:01:de:6d:8b:b7:44:d1:eb:
10:c2:99:73:6e:37:ca:39:9c:c2:0d:5f:e8:92:e3:2b:ba:9c:
45:f0:b4:da:10:f2:82:3c:dc:7e:4b:e6:a9:42:32:4d:e1:35:
19:f1:e7:22:8a:40:63:27:ec:fa:9c:c8:7b:8d:2a:86:ae:09:
ac:92:52:78:27:98:bc:0c:34:a8:fe:d3:46:34:85:f1:b7:3f:
50:17:fa:fc:9e:a3:b7:76:16:cf:6d:c9:cf:3c:c8:78:43:df:
cf:7b:34:d4:3c:e4:e2:9a:81:2d:01:6e:04:68:f3:29:dd:96:
14:e1:b9:56:7e:5a:ee:be:c3:72:9e:e1:a1:19:c6:06:39:49:
12:c1:32:37:be:24:cc:f5:b9:1d:51:94:be:35:47:1d:3f:26:
26:34:f6:96:1d:7c:22:ca:78:0c:17:39:f8:62:2e:cc:e3:4c:
5e:59:53:9f:ce:74:c4:12:3c:ab:f6:b0:68:17:92:10:9a:3f:
f9:f9:ea:7d:51:d2:77:9b:ed:eb:cf:e4:9e:cc:84:f9:f4:64:
35:cf:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:57 2024 by rpki-client on console-ams.rpki-client.org