Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
File: VC2XGtPC5DjUoxLRod51GBCspOA.cer (raw, json)
Hash identifier: OlWSbXuBXNUOVVVFL4vqVKsWHQEanHUN6oy2VijbkRg=
Subject key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64ACAF15D9C0274AD73152AEB6664E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209490
IP: 171.22.56.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ca:f1:5d:9c:02:74:ad:73:15:2a:eb:66:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:07:b0:44:11:37:3a:6c:c9:c8:4a:92:b3:
7d:72:1f:77:15:7d:86:35:09:d4:ec:51:19:c8:08:
4d:8e:89:18:d5:7a:e8:9e:9d:14:34:dd:4b:e6:cc:
34:a4:5b:fc:f0:2e:11:f2:c5:fc:5a:63:e2:c6:3b:
99:07:7d:d9:7e:bc:a7:1a:ac:9f:0d:3b:f5:8a:3d:
fb:e9:15:24:77:32:b4:85:83:6b:a3:46:88:99:6b:
28:11:fc:49:7c:54:18:8f:f0:d2:4e:ca:b6:d6:6f:
dc:b9:cb:95:4e:d5:84:4e:52:7d:e0:b2:67:a7:b7:
f2:5c:72:1e:63:b4:a5:a1:59:76:de:43:f9:c5:70:
b2:57:a4:bf:d7:0e:0b:b2:57:77:d6:9f:be:18:9f:
54:3b:89:aa:2c:22:25:e8:8d:41:f4:63:8f:f8:a4:
54:28:c1:dc:ab:07:6c:d7:33:71:cc:9d:a0:6c:58:
0c:61:4f:64:a1:76:35:aa:59:e2:ba:1f:99:55:cd:
97:b3:51:6d:9d:9f:ef:06:5b:21:12:24:0d:0d:54:
b4:a3:34:b1:5f:11:2a:c5:66:50:7d:20:12:0b:72:
6f:af:bc:b7:50:f3:71:a3:54:7a:98:92:b3:50:2e:
21:28:5c:10:32:f5:51:55:a3:89:3e:b3:a3:48:10:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209490
Signature Algorithm: sha256WithRSAEncryption
15:28:53:f7:0b:e5:2c:89:e5:79:3b:24:12:cb:ea:e4:1f:4b:
8b:4d:d5:80:48:b5:aa:e5:e3:84:85:44:06:23:62:12:d5:df:
53:03:0c:59:21:ef:2a:cd:6e:fa:88:dc:33:4d:58:a5:c3:99:
7f:eb:a3:ba:01:8f:4a:17:6e:67:99:d1:14:45:9f:bf:7c:3a:
58:59:7a:6c:58:47:ca:d5:f9:af:87:64:de:cf:90:4e:3d:94:
a5:a9:e3:68:7f:2a:79:48:dd:03:aa:f9:ef:df:08:57:ac:cd:
3d:63:5a:39:f2:3e:4f:7b:20:b4:be:b1:f7:99:4d:11:ac:6b:
4d:71:04:99:34:1e:b3:15:9d:72:ad:c5:96:3a:a5:13:29:ba:
63:1f:a2:c8:64:4b:61:63:56:9d:d4:aa:ac:6f:b9:d9:a3:84:
b6:8f:ba:9c:93:41:d9:28:6a:87:ba:44:9f:e4:c1:b8:87:9f:
77:8b:54:17:af:0f:0d:32:3e:9d:65:a5:31:8a:14:a0:c2:4a:
df:13:21:b1:ea:a8:ad:0e:6a:1c:b0:cf:06:d0:09:55:d7:30:
58:bc:c7:f1:b8:c5:e8:19:ea:b4:a1:20:28:6d:92:dc:82:bc:
be:58:62:73:40:3a:97:1e:e7:8b:82:77:97:71:33:83:8e:e0:
8d:7d:f9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:02:39 2024 by rpki-client on console-ams.rpki-client.org