Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer (raw, json)
Hash identifier: Zu436vqWbbWBX+vorjHWouXrqSsKG3G4C7afr7IjO84=
Subject key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF27371449377623271F8B7BC6BDE96A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 08:18:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.111.173.0/24
IP: 2a13:940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:73:71:44:93:77:62:32:71:f8:b7:bc:6b:de:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 08:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:fc:10:b7:0a:c2:18:73:10:03:c8:d8:31:
87:86:2e:53:eb:b4:67:3c:f4:6d:9a:d2:19:92:3f:
d6:2c:49:13:67:13:da:ec:14:0f:6c:e8:f4:9c:4e:
61:4e:7b:db:ba:6c:94:7e:0f:a0:b6:52:14:30:eb:
01:cf:c0:53:02:cf:f2:3e:76:d3:ca:7b:b6:7d:ed:
70:c3:19:a3:16:48:8c:42:02:5e:fe:1d:c9:9d:e3:
ec:dd:05:5a:ec:e0:5d:d0:dd:0e:3d:e8:80:9f:02:
b7:92:28:50:ce:87:82:e9:c3:a8:4d:ae:2b:b9:5c:
8c:b9:0a:0e:e0:69:ab:07:39:96:8e:9e:7e:b1:47:
85:58:9e:0a:5a:83:3c:2f:b9:7a:3a:46:8d:07:21:
f5:ab:8e:39:10:cb:9d:0b:e4:da:25:96:11:08:d2:
64:59:48:e2:8c:bf:77:6c:a5:f6:9c:75:bd:73:b5:
bd:8d:75:45:7e:2d:be:1a:10:f7:75:77:32:aa:ff:
b5:4e:5a:fe:4b:06:c7:07:90:f0:d4:b5:9d:14:e0:
94:de:79:f8:77:e3:23:ac:2b:e7:8a:08:df:96:ee:
77:d3:9b:16:b1:b9:8b:2d:70:07:90:29:e0:4a:55:
8e:4a:ec:ef:f6:19:26:b3:3e:1e:82:72:92:9d:19:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.173.0/24
IPv6:
2a13:940::/29
Signature Algorithm: sha256WithRSAEncryption
51:54:ac:b7:01:9c:d6:80:66:9d:87:bb:c9:f2:21:69:71:cc:
41:e5:46:0f:ef:78:e9:da:66:d3:a0:42:a2:67:10:c6:99:d5:
1c:f1:ea:93:f0:6b:5e:e9:4c:f2:40:a7:0b:7b:a1:f5:15:d9:
ec:ce:b3:50:d3:2f:60:3c:9a:fb:42:c3:8e:39:e0:6f:69:94:
59:ea:21:87:d9:87:97:1a:ae:c3:8a:03:5a:22:38:8d:df:9b:
a0:02:b9:6e:0d:ff:bf:bc:a7:56:02:95:3c:9e:1d:12:b0:0e:
07:6f:f4:bb:e6:c8:e0:18:9c:bb:45:ac:ec:1a:43:76:af:7a:
6e:57:0b:bf:c2:7e:dd:4d:38:01:fb:da:87:45:2a:7f:52:f9:
85:34:f5:34:32:a3:a1:ec:73:99:c6:55:1b:93:73:cb:54:7a:
d2:63:d5:3c:fc:a5:25:d0:13:e2:8c:ee:90:c3:2e:df:a6:36:
a7:8c:5e:6a:42:52:73:ad:c8:10:f8:dc:f7:90:7e:b4:d8:ba:
e2:a2:93:1a:f4:cf:3c:ad:20:fe:d9:4a:c5:dd:bb:6c:24:9f:
5b:d9:4a:05:7a:60:86:d6:28:d7:44:9b:1f:86:4a:dd:31:56:
a4:9b:82:4f:53:0b:e8:e7:59:fd:fe:c5:be:7f:4d:5f:be:a8:
28:a9:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:08 2024 by rpki-client on console-ams.rpki-client.org