Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
File: VSna2lwfQ2ejPLx11M6akAF4MpQ.cer (raw, json)
Hash identifier: 65KvPKRvDMThH5RPUKdmw6t8Apg6NrJhINuj9oGVqUI=
Subject key identifier: 55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D65E1C7C2A8D4BDB420D3946A73A4F6B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Feb 2024 18:15:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.253.120.0/24
IP: 2a07:ff40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:e1:c7:c2:a8:d4:bd:b4:20:d3:94:6a:73:a4:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 1 18:15:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:ac:d6:be:53:80:b2:bc:2d:01:f9:bd:ec:
6d:5a:09:53:f3:44:6d:23:a5:7b:47:06:2b:96:ca:
34:90:d2:69:4c:6e:ac:c8:76:fd:45:44:c6:c9:34:
f3:f3:66:50:f3:17:70:54:2b:f5:51:cf:b2:88:be:
f4:ed:d5:82:24:a5:7d:22:ee:dd:56:81:c7:ca:12:
0f:cb:ee:3b:9f:68:78:a1:55:28:09:7c:04:4d:f2:
50:b3:d3:e8:01:7b:54:09:e0:26:02:03:0d:b3:07:
8e:78:c1:eb:6b:ea:96:76:f1:6d:fa:1f:90:c8:ce:
1d:09:03:16:d6:42:60:34:d9:54:76:73:14:47:77:
c1:e5:53:bb:0b:50:1e:74:cf:0a:42:26:b0:cc:30:
2d:fd:6a:3f:cf:df:9b:f6:4f:50:b2:f5:e6:92:2f:
b3:d5:5a:08:27:12:de:82:3e:00:f2:a5:78:eb:ac:
64:78:af:4d:3a:17:be:d7:6e:41:1f:6f:a8:ef:4d:
0e:ea:aa:62:23:83:49:c5:af:fd:a0:8a:32:3a:15:
cc:7f:28:b7:3f:3f:d0:d1:2c:d8:2f:c7:e8:f2:f9:
db:11:1c:6b:89:0a:cd:e7:43:6d:3e:fe:e3:a8:30:
d5:e1:c6:73:e6:b0:cd:1d:1c:74:65:86:cb:16:62:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.120.0/24
IPv6:
2a07:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
72:1e:83:61:64:35:6b:0d:1b:a8:8e:f4:10:1e:01:c6:34:63:
6f:5e:61:26:c2:9c:8c:dc:fd:6c:75:33:26:a2:c7:db:5a:11:
b1:f8:09:94:30:96:4e:ab:64:01:d4:c3:ef:aa:8b:c9:77:45:
0f:34:a5:15:0f:5d:4e:16:dd:60:38:26:90:e2:fd:72:36:a6:
c8:87:e9:16:5b:50:1d:af:21:93:60:ff:52:a4:5c:3c:3d:39:
d4:07:4e:b5:62:a7:04:7a:36:59:e9:bf:1e:63:f6:7d:77:ee:
ab:72:66:e1:f4:c8:dd:9e:1e:03:2d:4f:40:fc:9d:b8:af:e5:
dc:2b:4b:7c:a5:ae:e4:0c:aa:8b:ba:05:eb:7b:09:2f:8b:a2:
ff:3a:83:ad:04:a8:7e:92:20:6f:13:a8:dc:00:37:3b:55:40:
a5:5d:8c:f1:aa:26:55:da:d9:7a:96:bc:40:8d:ee:ef:d2:b5:
32:0a:59:a2:b6:dd:7b:03:39:14:5f:de:db:a6:15:c0:af:89:
30:f0:1c:69:db:d4:01:2b:a9:9c:08:5c:75:bb:e5:59:f4:e7:
b5:ff:28:c5:92:3b:36:ae:2f:7a:6f:b4:ec:d3:19:b5:14:79:
b2:ed:92:aa:73:b9:39:27:86:d3:ca:f3:2e:e7:db:a5:51:77:
e3:ac:29:bf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAY1l4cfCqNS9tCDTlGpzpPa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjAxMTgxNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI5ZGFkYTVjMWY0MzY3YTMzY2JjNzVkNGNlOWE5MDAxNzgzMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aSs1r5TgLK8LQH5vextWglT80Rt
I6V7RwYrlso0kNJpTG6syHb9RUTGyTTz82ZQ8xdwVCv1Uc+yiL707dWCJKV9Iu7d
VoHHyhIPy+47n2h4oVUoCXwETfJQs9PoAXtUCeAmAgMNsweOeMHra+qWdvFt+h+Q
yM4dCQMW1kJgNNlUdnMUR3fB5VO7C1AedM8KQiawzDAt/Wo/z9+b9k9QsvXmki+z
1VoIJxLegj4A8qV466xkeK9NOhe+125BH2+o700O6qpiI4NJxa/9oIoyOhXMfyi3
Pz/Q0SzYL8fo8vnbERxriQrN50NtPv7jqDDV4cZz5rDNHRx0ZYbLFmJUywIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFUp2tpcH0Nnozy8ddTOmpABeDKUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzQ0ZWNj
My0xNTI1LTQ1YTYtOTI0OC05OTUyOGNmNDVhOTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNDRlY2Mz
LTE1MjUtNDVhNi05MjQ4LTk5NTI4Y2Y0NWE5OC8xL1ZTbmEybHdmUTJlalBMeDEx
TTZha0FGNE1wUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAn/14MA0EAgACMAcDBQMqB/9AMA0GCSqGSIb3
DQEBCwUAA4IBAQByHoNhZDVrDRuojvQQHgHGNGNvXmEmwpyM3P1sdTMmosfbWhGx
+AmUMJZOq2QB1MPvqovJd0UPNKUVD11OFt1gOCaQ4v1yNqbIh+kWW1AdryGTYP9S
pFw8PTnUB061YqcEejZZ6b8eY/Z9d+6rcmbh9Mjdnh4DLU9A/J24r+XcK0t8pa7k
DKqLugXrewkvi6L/OoOtBKh+kiBvE6jcADc7VUClXYzxqiZV2tl6lrxAje7v0rUy
Clmitt17AzkUX97bphXAr4kw8Bxp29QBK6mcCFx1u+VZ9Oe1/yjFkjs2ri96b7Ts
0xm1FHmy7ZKqc7k5J4bTyvMu59ulUXfjrCm/
-----END CERTIFICATE-----
Generated at Fri May 3 09:09:26 2024 by rpki-client on console-ams.rpki-client.org