Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer (raw, json)
Hash identifier: XOwdxObE1I0MWr2SpqnlA08o0HDiredtPiUVaMSXyHk=
Subject key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B7AC4727C11C789CE5A0A2DD1A1E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.231.48.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7a:c4:72:7c:11:c7:89:ce:5a:0a:2d:d1:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:89:bb:6d:de:89:ba:25:75:09:5f:09:de:
88:f9:b7:ea:33:bd:7a:93:d0:f9:0e:5b:a7:0a:cb:
8e:b7:33:6b:6c:ac:92:89:1a:95:21:41:81:6c:6b:
50:38:36:0c:bf:98:c0:29:cb:a0:7c:a7:1c:64:3b:
0f:19:74:aa:22:a3:1e:f1:b2:48:b5:55:c2:3c:3a:
39:7a:41:15:e1:e8:a6:d8:97:ce:7f:b5:bb:bc:6f:
5a:0f:81:1a:08:8c:b4:d2:aa:67:25:da:25:e9:58:
0d:e3:78:20:b4:35:d8:7c:34:42:ba:53:cc:f3:03:
bb:86:b0:18:95:57:6d:a0:c6:c1:8c:d9:d5:72:ae:
58:cc:ce:b8:6c:41:cd:e1:50:4a:2e:f7:ef:04:86:
15:6d:58:98:31:72:07:5b:dc:6a:d0:b5:d4:7a:ab:
38:bb:4c:58:a2:a3:e1:42:60:6a:2c:c7:1e:a7:88:
30:9a:7a:c0:16:f3:1a:d0:2b:7a:d9:6f:2f:73:ac:
4d:dc:f1:1e:58:fa:d1:76:0b:da:0c:29:ae:be:63:
54:ba:76:e7:2d:61:2b:a8:ee:d1:84:45:92:4e:10:
8f:c5:4b:25:a6:98:f2:f1:c1:05:e7:b9:29:1f:26:
77:17:fc:79:74:e4:69:b4:64:f7:10:36:ea:c9:74:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:a5:94:32:bb:5a:fe:59:6d:08:29:01:2a:e9:d6:bf:43:f8:
59:ce:69:de:11:f4:fb:ed:91:c5:af:21:36:5d:7c:af:ee:22:
9a:16:c4:4a:f9:14:23:5c:64:40:34:0c:44:60:6c:97:98:7e:
e0:4e:32:8b:e0:b7:74:c3:62:d1:cb:51:58:9a:9a:10:9e:b8:
d2:cf:ed:06:ba:a4:2c:99:63:27:52:90:2d:79:d0:49:8e:32:
57:95:4a:ee:8d:2e:04:db:77:8b:a3:e3:7d:61:c8:7f:30:8f:
1e:71:7f:75:1f:23:36:8e:74:9d:e5:d4:2a:8b:eb:f8:ae:ca:
c4:05:7f:9a:2b:35:73:57:01:81:db:d5:0e:90:95:6c:cc:44:
9d:ab:7b:4c:31:0a:b6:1b:75:43:6e:55:4d:ce:f2:3e:5b:f3:
6b:e5:a5:3b:66:61:df:d1:de:fe:39:42:d0:ab:75:e2:37:98:
e4:11:0f:08:fc:bc:45:ad:1d:24:ac:b1:6f:1b:be:a9:f8:9a:
52:13:4f:78:6b:d2:7a:56:38:57:9e:5f:ea:b2:e6:ac:e8:11:
8d:5b:c4:dd:4c:88:13:5b:a7:ea:86:7d:37:6f:f5:a1:d3:83:
5a:e7:9e:5b:27:ed:46:c0:b5:dd:08:47:85:50:d6:1b:6f:88:
19:e3:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:22 2024 by rpki-client on console-ams.rpki-client.org