Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
File: VZhirROQ5Nv4grUie8kzUPLYBxM.cer (raw, json)
Hash identifier: Mo8TBmjAQHIbRmvVvUk0NEESI8Qtk6hiNwyRDWndLIg=
Subject key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7273C4255D0F858A53BB2476B68DDC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204769
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3c:42:55:d0:f8:58:a5:3b:b2:47:6b:68:dd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:51:8c:19:51:8e:fa:17:e4:76:1c:13:f0:
e8:57:f3:d9:39:30:66:16:90:7d:f4:d0:67:32:8c:
8e:96:02:bd:ec:8d:30:7f:93:98:12:15:6a:20:d5:
8b:78:56:f0:0b:a5:2f:68:0e:a1:6a:42:a0:9b:aa:
2e:74:b2:f5:18:3d:23:49:75:6c:19:0c:aa:17:be:
8e:b6:75:de:14:3b:ef:a5:d3:d4:6f:09:61:c3:e1:
5e:fa:41:db:d2:df:4c:4b:67:38:ca:b8:87:e8:73:
71:ed:5f:12:5a:41:24:85:86:96:98:4f:d9:d4:49:
06:ba:0d:41:a2:ef:0c:7b:df:73:81:78:c4:f7:e2:
cc:31:ac:9a:f3:4e:5e:1e:82:82:59:f1:f6:4d:2b:
c5:aa:0d:c6:09:ca:25:0b:f1:0c:cf:31:5c:f5:a9:
51:f3:09:73:a9:24:2f:d2:eb:b3:9e:f8:85:bf:36:
e4:a1:f6:f5:3e:7e:dd:c9:2c:50:cd:49:3e:f0:29:
f1:de:c1:1d:76:5e:52:6c:70:01:f2:87:9b:80:cd:
6b:5d:fa:73:cc:a2:31:70:4f:9c:b2:af:72:ac:16:
e4:64:02:b4:ce:b8:04:e9:3a:a1:2b:74:b0:33:6d:
5b:8f:02:07:07:af:8e:62:b0:1c:5b:b8:a6:b9:61:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204769
Signature Algorithm: sha256WithRSAEncryption
6f:07:86:9d:f1:1f:a9:34:18:f1:16:84:ae:3d:b1:aa:38:c6:
1b:0c:ea:99:86:76:9f:67:25:c5:26:6c:72:ef:5e:3d:7c:bb:
a7:d1:65:85:59:63:07:55:7a:d3:a1:13:61:bb:64:92:32:29:
22:a6:b6:0b:46:91:f4:67:4a:3b:c5:c5:49:2d:bf:f7:12:3f:
3c:3f:bd:40:99:85:30:68:8c:12:f4:d8:b2:67:3d:eb:a1:f3:
c8:19:43:e6:b0:96:ba:b0:64:8f:f7:5d:3f:9b:58:06:96:0e:
7b:ee:15:7e:47:c7:ce:b0:d2:77:7a:44:9a:59:5e:15:7c:7e:
e4:ef:ad:7f:d1:fe:36:c0:8d:d7:a6:b7:4f:45:29:4c:ad:b0:
ba:ec:d5:99:a5:fe:2a:dc:bc:f8:98:cf:78:20:f1:28:33:a3:
ac:7a:17:b7:45:90:da:7f:0d:8f:51:7b:75:72:98:8f:4f:6f:
26:b9:ff:a9:8d:89:fb:c5:09:7d:ad:c4:32:4c:7b:8a:c7:00:
28:af:b5:9c:ba:31:1f:a8:29:6c:75:e4:8c:b0:a7:13:ba:56:
5b:1a:1f:52:ef:4a:60:65:9f:80:4d:c0:3f:0c:f8:9d:26:5e:
9a:4f:b5:20:f4:5d:5a:99:82:9f:ef:11:f7:0e:f6:16:7a:4e:
82:c8:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:02:51 2024 by rpki-client on console-fra.rpki-client.org