Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer (raw, json)
Hash identifier: fRroKEPgp/2CFofwMTMHpQGOHJfQ2QRePEI7AQ69b/U=
Subject key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01902B44CDFF9AB17F4908811F7767E550FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jun 2024 12:14:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.211.92.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:44:cd:ff:9a:b1:7f:49:08:81:1f:77:67:e5:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 12:14:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=540f4a1b92338b49ca63021219059ce570ff5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:0b:19:b3:61:1e:37:26:7e:f6:f4:f8:33:
77:4e:c3:40:e6:90:9c:84:39:2f:75:93:86:5b:3f:
40:5e:4d:fc:bf:9c:4c:96:ec:99:d1:bf:c7:1d:09:
a2:d9:0e:c2:eb:28:7a:4f:a1:99:3c:2e:36:13:8e:
e4:6c:a7:7d:85:e0:79:9b:91:0b:b5:dd:6e:07:89:
ad:61:2d:f4:6c:3a:5e:79:57:cd:92:34:33:e6:d5:
f3:16:21:28:63:c9:44:ed:d5:3d:8e:0f:e0:c5:80:
08:9e:df:7d:a0:4d:ab:80:13:85:c9:d0:cf:20:ee:
b1:a8:6c:ac:dc:15:0f:a4:65:60:a9:91:ce:ff:b3:
97:b5:fd:41:47:24:18:8c:d7:77:36:12:9f:6a:94:
8c:ae:f1:c1:a4:1f:68:02:54:e8:7b:ad:b7:62:6b:
5b:92:e4:95:1c:50:c8:13:ea:cb:c6:23:15:6a:13:
01:9b:57:97:c8:86:15:a4:03:1d:6b:0c:f5:d7:b8:
12:35:25:e7:a6:11:cd:fc:73:3e:f1:ff:72:76:fe:
5f:2e:ce:d0:26:47:17:fe:4e:be:cb:8c:fd:b7:09:
29:df:97:c9:a3:8a:23:2d:56:fb:57:3a:c9:70:9c:
42:24:29:f8:f1:1e:25:24:e5:a3:f2:58:f0:d2:8c:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:80:71:7a:66:cf:8c:cb:1e:9a:4c:ef:0e:35:18:20:d7:1e:
99:63:ae:06:4c:93:2a:f1:30:91:46:4b:09:41:f6:7c:51:7a:
d7:f2:1d:36:38:5b:83:dd:6a:ac:d7:fa:01:65:78:7b:28:20:
73:21:3a:aa:ad:f9:5f:ce:09:9f:c0:af:f4:1a:10:ee:e7:a9:
55:50:5f:84:5d:69:61:80:db:12:70:33:a3:dc:cf:cd:09:e7:
95:78:50:e4:8a:c5:83:43:fa:9d:9d:62:8a:e5:5b:7b:fe:19:
e4:87:60:af:c0:69:fa:7a:5a:bd:24:6d:78:b8:e2:3a:6d:83:
ad:4b:c1:62:59:d5:af:3f:dc:71:db:71:b0:71:88:10:fc:08:
95:34:1d:ef:30:88:e5:f0:e4:87:91:02:ed:3d:ef:be:8a:83:
63:39:8f:e3:1d:88:93:f2:40:21:8a:ff:9f:84:8e:a4:f5:ea:
51:a2:fc:58:3d:49:3e:2b:0a:52:07:f7:fc:2d:2c:5c:11:59:
24:9e:10:75:8e:60:77:90:11:c3:03:96:0a:45:5d:cd:9b:37:
2a:5d:89:4e:c8:9a:28:eb:58:a7:51:d7:7a:4b:6f:f1:c6:94:
3b:1c:da:a0:74:74:22:e4:a6:06:02:e7:0c:eb:1c:4e:a7:e2:
8d:46:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:02:59 2024 by rpki-client on console-fra.rpki-client.org