Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
File: V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer (raw, json)
Hash identifier: vBDjLG7ywhJlYEqFy/Xk+gD2KZgDyQM5tjafBqG2/oM=
Subject key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F33C863CF52BF65FC330348A5E914
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:17e4::/48
IP: 2001:67c:17e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:33:c8:63:cf:52:bf:65:fc:33:03:48:a5:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:de:4e:46:4a:ed:db:db:04:14:b1:30:c6:
06:9f:24:39:06:80:90:26:08:ce:60:de:a9:55:af:
01:77:d6:ac:5f:3a:2b:1a:14:20:74:82:10:6f:7c:
f6:43:e6:b4:7f:77:64:19:08:51:cb:f4:70:03:16:
a9:0c:40:9e:7d:d5:95:ee:e1:e3:05:9f:bf:c4:08:
ff:34:19:d7:dc:a2:d2:b1:27:ef:4c:3c:22:a1:07:
92:08:72:cf:92:88:0b:29:08:82:7b:c9:a0:b5:ee:
4d:97:e4:0a:48:08:59:c4:8a:64:e3:bc:33:73:34:
df:43:1c:94:6c:e1:ab:2b:45:ba:6f:41:fe:2a:18:
34:99:ee:e1:9b:9a:4e:19:42:42:e1:6d:d6:fd:cd:
67:ef:a4:57:3c:7f:96:95:06:b3:a3:5c:18:8d:27:
f4:8c:5a:ae:a1:fc:d5:6d:ad:8d:a6:ff:d4:f9:ad:
74:ab:73:ad:b0:ad:39:c7:75:df:7e:0f:4d:0b:33:
9d:db:45:f9:0b:1b:08:e3:3f:22:29:e4:4e:5e:a7:
26:6b:39:56:b5:26:3a:a6:69:ba:4d:65:4c:d3:32:
a0:c2:17:2c:45:80:73:0d:6f:dc:4b:32:4a:dd:a3:
87:1f:69:f7:a9:d4:bc:3c:fd:d3:fe:58:dc:30:41:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17e4::/48
2001:67c:17e8::/48
Signature Algorithm: sha256WithRSAEncryption
48:61:4a:10:55:93:c5:b1:b9:e6:03:bd:47:81:59:c2:a8:c6:
31:1e:66:ad:71:4a:f4:25:49:1a:3e:18:78:3a:f5:ae:20:31:
65:ee:57:79:a3:89:bd:b3:f7:e0:f9:6d:4a:d0:04:92:cf:a7:
9a:dc:2a:aa:29:a6:7f:3b:3d:4e:f5:4f:bf:25:3e:6b:95:92:
19:4c:d7:e9:fd:ea:b1:1a:cf:c2:77:9a:5d:14:4f:ec:21:bb:
88:86:8e:3b:29:65:5f:5f:ad:82:44:72:9c:1a:24:4e:2d:06:
5a:7b:90:71:36:c0:28:e1:93:c6:0f:72:26:bf:44:b3:66:e3:
93:f1:63:0b:03:bf:41:20:f9:05:0b:1f:19:6a:be:22:10:a8:
50:a1:5c:31:e3:5e:ef:40:7d:0a:2a:26:74:df:de:9e:5a:8e:
dc:b3:5b:ab:11:d5:23:d1:e2:1c:da:4c:f0:89:c6:f2:1b:8b:
a4:ff:34:34:11:b3:9b:67:17:b6:52:13:0e:79:59:8c:07:f9:
3d:e6:27:bd:8d:ff:5c:c6:82:4b:fb:4e:e2:e6:ba:87:36:ce:
88:ea:99:8c:7d:07:11:31:a2:5e:60:ea:98:cf:a5:ac:bc:03:
c7:3b:98:12:ca:a8:c8:c3:33:b1:c1:77:55:26:53:01:e7:e9:
0e:3c:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:02:22 2024 by rpki-client on console-fra.rpki-client.org