Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
File: VGLTx682xAGqlwlNPyOJ14ddFOw.cer (raw, json)
Hash identifier: 3Lncwp7UbZ8rIJ1cUYpjbSS411aJPqmsYxh9hcysGEM=
Subject key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019275FE779CBD1ABB33FE4EE6742D6C1031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Oct 2024 10:34:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48003
IP: 91.208.239.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:fe:77:9c:bd:1a:bb:33:fe:4e:e6:74:2d:6c:10:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 10 10:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:33:47:3a:3f:b7:13:d2:88:9d:b3:72:76:
5a:f1:aa:05:51:d0:41:f1:fe:54:7f:49:47:4e:11:
76:90:a9:79:03:63:00:34:31:71:68:cb:67:6c:f1:
12:2a:1b:2a:4b:ea:ab:75:b2:1e:ec:ec:70:a3:c4:
bf:90:e6:76:8b:a4:d0:7e:09:59:46:ab:ca:95:27:
04:f8:37:88:1c:0d:dc:7a:87:c3:46:56:a6:98:f0:
81:d3:47:bc:05:a2:fb:3a:c1:4c:34:16:a1:9d:a2:
61:89:62:7a:a6:cf:87:d3:28:68:c9:ea:7c:d4:2c:
57:3f:9e:61:e6:e6:c9:22:88:e6:7c:41:79:d2:80:
94:60:69:2b:c2:e7:ea:af:b8:89:8b:a0:9a:12:af:
98:7b:55:3a:c8:91:7a:af:54:e0:ae:b2:d5:30:84:
8e:55:ab:21:92:6b:98:ef:3a:9b:66:ca:45:9d:13:
ec:3d:7a:5d:ce:a1:a0:51:bc:bd:59:a4:87:c7:da:
24:d4:6e:2f:b2:ad:11:5d:3c:a7:68:b5:fb:40:ec:
e3:9b:91:11:15:91:df:d7:92:67:19:58:e0:27:e9:
e7:44:02:6c:7b:5a:5c:11:86:44:57:d3:85:f1:35:
d9:73:35:f6:ae:57:ad:87:e3:9d:66:b5:8b:73:a7:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48003
Signature Algorithm: sha256WithRSAEncryption
29:92:5c:59:f1:8a:c7:41:ef:09:99:2d:91:c7:07:db:aa:83:
b0:d9:db:73:f4:e4:e4:b7:51:f1:cd:9d:52:8b:df:fe:df:72:
fe:1d:2d:18:f7:fe:28:2f:2d:21:26:89:86:0a:ce:03:17:48:
83:a2:08:d8:fc:a1:c4:24:f9:64:95:fb:87:81:9c:ed:0f:9f:
5f:f4:28:fe:02:5f:67:89:2f:45:e6:7e:4e:5d:45:04:3b:82:
81:a2:1d:6c:f5:f0:76:1b:6a:40:03:18:32:16:71:c6:c4:b8:
0a:db:64:dc:cd:52:68:c5:4e:54:92:78:7c:3f:6b:35:ab:28:
11:e2:cb:d2:49:5b:94:0d:10:b6:89:1e:12:8a:89:b2:b2:d0:
9d:83:77:38:ae:9a:cc:19:de:b4:33:e4:61:ae:d4:00:17:bb:
8f:ee:fe:bc:cf:87:6a:48:74:f2:22:b0:0f:17:cc:55:71:74:
00:9b:d6:af:6a:2a:1e:6a:90:d4:b8:3c:53:ae:3e:0a:84:9e:
06:f0:6c:ae:57:34:2b:84:a1:98:6f:00:49:a6:e5:97:f7:a8:
32:0a:e8:74:84:43:76:20:6b:39:61:c3:c2:ce:77:3e:7e:d6:
b9:46:50:a7:1c:bc:dd:22:38:87:8c:af:62:8d:4b:a0:53:e9:
34:41:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:52 2024 by rpki-client on console-fra.rpki-client.org