Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer (raw, json)
Hash identifier: uM7SqJUZ+ewT8fX3u4HDOQEM9ZlmLXU48RLn42dJesY=
Subject key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC6A287C1F9CF77EF8D123628E5364
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208115
AS: 210413
IP: 45.157.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6a:28:7c:1f:9c:f7:7e:f8:d1:23:62:8e:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:aa:cd:a1:d3:dc:c3:e4:be:21:6e:ce:02:
ae:85:65:b0:c5:5c:cc:75:e6:14:a5:f0:ca:cf:b5:
3f:83:0a:15:7b:27:12:e6:d6:61:0e:89:54:5e:85:
40:83:c0:d6:55:78:5f:e1:5a:71:4f:c4:b7:83:e3:
f2:9e:23:1d:d4:9b:e2:bb:38:b5:20:57:9a:28:c3:
a7:40:56:ad:0a:5c:b4:dc:ce:5b:9a:18:bd:d3:9e:
32:3f:a5:fe:88:de:05:be:b3:02:12:37:84:a2:0e:
a9:0c:27:81:72:9c:3b:2c:8d:80:c3:26:2f:c5:f5:
c4:74:4f:02:92:38:ed:d3:a1:f1:bb:68:d0:8f:31:
34:a2:b2:45:90:46:b3:4a:12:54:ee:d1:80:f7:8d:
ea:f8:8e:55:ce:17:72:87:22:80:23:51:d1:0e:40:
16:6a:fc:9b:83:ce:aa:35:67:2e:f6:f5:a4:ad:c0:
9f:b0:a9:e2:72:78:8c:c8:70:59:ec:b6:65:3d:5f:
b2:00:09:1a:fc:2d:71:2d:55:96:18:02:6e:5a:f9:
bd:cf:9f:4a:07:eb:aa:4f:cc:b2:0a:f4:69:56:f6:
5b:4c:65:02:04:b5:48:c2:f6:9b:a9:ca:89:0c:f5:
c1:68:a7:9f:7a:e7:ce:a8:9c:82:cc:6b:d6:93:fa:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208115
210413
Signature Algorithm: sha256WithRSAEncryption
6e:b1:19:49:32:a4:de:79:94:e7:12:dd:69:c5:8d:94:42:c8:
44:5b:6d:f3:34:0c:cd:84:37:f9:91:94:65:41:32:3c:81:dc:
05:56:e6:04:a5:92:02:c5:47:34:96:8e:7a:2a:20:aa:c1:f4:
de:97:e4:15:dc:bc:89:78:4c:48:bf:d3:25:16:b2:67:db:8b:
7c:09:92:73:af:27:6b:70:9d:06:90:c9:14:cd:02:4e:6f:82:
b6:50:3a:b0:ef:f9:7d:ee:8f:eb:65:9b:ea:a7:8e:8f:f4:46:
88:c7:b2:2b:55:f5:9e:d7:72:73:03:58:71:79:1f:4f:c3:d7:
9a:22:ef:bf:dc:0f:6d:d1:ef:d7:41:ea:32:82:fe:d3:97:8f:
0d:e3:48:3e:80:62:b1:d0:79:b7:88:f3:c1:3e:52:9b:b7:4a:
cc:91:af:3c:53:47:2c:b6:86:1f:62:93:48:74:5b:97:b9:67:
14:54:30:d7:04:26:9b:4a:3e:37:43:1b:19:61:e9:78:18:5d:
70:e8:2f:3f:e7:57:3a:de:50:99:fb:e8:44:8f:be:db:9b:d8:
12:3a:0e:0b:e0:10:d4:e5:d7:7e:75:f2:fc:32:4a:9e:ba:89:
5e:99:8c:10:67:81:e7:b9:c9:64:b1:15:42:ef:77:fe:f2:90:
5d:85:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:29 2024 by rpki-client on console-ams.rpki-client.org