Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
File: VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer (raw, json)
Hash identifier: 1viiYz8nfjP42UJn3Mmh/T6h/0s1RjPuOuLivNNezxE=
Subject key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEF9344C8104B1C8777A27C7B742B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.69.163.0/24
IP: 2a12:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f9:34:4c:81:04:b1:c8:77:7a:27:c7:b7:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:5d:83:23:a8:6f:37:24:fc:73:3e:ca:09:
bf:f9:48:f9:18:5a:e2:59:bd:af:54:a7:3a:40:c7:
1c:12:a1:ad:87:32:a1:f0:0a:2b:b2:a4:2f:5b:9e:
05:5f:70:a8:aa:93:8e:5f:e3:e1:b9:14:1e:ad:05:
dc:7f:31:7a:b8:8d:7f:ae:f4:ce:f8:b0:04:3c:c1:
e1:35:96:b0:59:d9:0d:7d:f0:a1:88:5a:23:91:79:
0c:6e:36:25:94:45:95:90:5b:32:60:42:ed:4c:38:
9c:61:cd:fc:e0:47:f5:3c:df:c1:5e:1c:04:ef:9c:
f8:9b:30:04:ca:bd:66:8c:51:16:45:f8:2f:4e:1a:
f3:2f:07:b1:d1:13:68:64:75:20:c6:0d:82:97:25:
6c:7f:41:42:44:77:86:90:45:be:22:39:7b:5d:85:
f9:0a:d3:1d:e3:e6:fb:f3:43:56:87:95:19:67:b9:
34:f0:5e:7e:37:db:5a:54:3c:4a:8b:e7:35:9c:c1:
b9:24:75:e5:62:1d:c0:f1:d0:0b:cd:03:bb:9e:7f:
53:17:7e:3e:4d:52:98:77:a7:e2:95:96:26:04:49:
9b:10:92:46:a5:67:2b:da:b0:c4:f8:50:57:1c:79:
fc:dd:67:1a:42:a9:5e:50:76:a9:ac:72:21:4c:78:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
IPv6:
2a12:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
64:d7:9d:84:7a:e7:b6:09:cb:c4:92:7b:cd:4a:ca:c9:ed:32:
47:4e:ad:96:1b:85:e4:a3:79:60:5c:5e:c1:9d:40:2f:47:11:
a9:5f:93:7b:52:98:25:21:07:ee:18:df:63:f2:70:08:5b:1c:
2d:f5:ac:fc:02:1b:74:27:54:87:3f:72:2d:5d:f0:ad:ec:2a:
e7:57:f9:59:05:59:36:d6:23:44:f3:f2:26:64:15:b7:b3:14:
3c:cb:55:25:bb:ae:74:bf:97:78:5b:26:95:b9:9a:1a:a2:31:
1e:ce:5e:21:68:13:03:07:ab:04:d6:b7:a0:d2:ea:9a:d6:68:
6d:bb:1a:36:6d:ca:88:23:34:61:e0:1b:63:e5:87:bc:4c:19:
9f:29:02:cf:db:48:be:a2:82:0c:60:b7:bc:0c:93:7b:90:ac:
5f:70:f5:5c:b6:62:00:76:f3:11:fa:ff:27:12:a1:c9:41:0a:
90:26:e8:ef:96:43:7d:d7:84:e6:fa:bc:5a:20:7b:3e:a1:88:
9d:05:a7:1a:08:85:44:bc:30:20:db:fc:03:a7:97:f3:40:84:
9f:0c:3d:89:02:f7:0a:2f:5b:3d:97:49:42:4c:33:83:ec:fc:
64:a3:a3:73:08:1c:33:d3:82:90:b5:ab:13:ba:08:cf:d4:b1:
40:01:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:02:40 2024 by rpki-client on console-ams.rpki-client.org