Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer (raw, json)
Hash identifier: ti4aryAFpmV3BZmlUpWnUAFbUCR4VH080lwVW0zaU1A=
Subject key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4BEFFF3992FD571CE1A20E40F98F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215333
IP: 91.90.163.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:ef:ff:39:92:fd:57:1c:e1:a2:0e:40:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559a769412d2d963b491ebe31d44111dcafccc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:46:3d:68:9f:d2:b5:fb:d8:33:5c:2c:6d:
ca:26:9e:ee:57:f2:65:6c:86:0b:05:d2:ba:d0:37:
ba:b5:26:50:a5:10:74:46:ef:d6:e2:b8:cf:76:c3:
c9:bc:10:1c:3e:34:b2:1f:19:28:56:96:78:06:cd:
1e:fa:32:03:ac:55:43:17:2a:28:53:b3:66:18:88:
83:f6:a1:8a:d1:e4:c3:3f:35:1c:2e:be:9d:b4:35:
ce:8b:4d:a8:64:8a:17:58:f3:f1:71:92:85:f1:72:
cd:af:60:40:d6:5f:79:f3:43:8c:f0:98:9a:df:47:
89:2c:c0:1b:25:87:e8:4c:8e:17:88:ff:58:4c:4c:
20:66:55:e2:7a:5c:bd:e6:cb:46:20:8b:df:00:cb:
d0:e8:2c:f8:18:ee:c6:d8:ae:91:1f:d9:a1:9e:6a:
06:04:1a:33:81:43:74:06:7a:21:57:28:9e:58:9e:
aa:65:52:a3:19:ec:60:b7:68:ba:eb:95:f7:e7:2d:
3b:bc:48:44:f2:45:04:d6:38:7f:73:1c:53:e4:ef:
59:aa:f4:41:33:32:86:1b:e0:bd:3b:5c:bb:e8:29:
21:c6:ca:15:09:cf:37:c9:f3:cb:96:02:6f:70:44:
cd:08:cb:ca:05:b6:9e:d8:e2:1d:9a:b0:4a:c8:8d:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.163.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215333
Signature Algorithm: sha256WithRSAEncryption
5f:a8:2c:f9:a9:60:9b:e0:41:fa:5a:82:fe:5a:79:d0:b4:22:
85:68:89:a0:f7:30:52:0b:55:f6:ad:61:26:74:40:5e:db:ce:
d5:0f:b6:23:8f:71:29:a9:65:2a:07:54:a5:a6:9b:1b:e7:e2:
ec:d6:4e:73:95:c4:40:eb:4e:51:cb:a8:0c:f5:79:cb:f8:82:
1a:1a:ce:91:2a:6b:8c:28:a9:2c:cb:b3:a5:e0:32:40:f7:49:
f1:99:b6:6e:c0:31:bc:60:ab:48:b8:51:73:87:da:d3:1e:39:
77:51:d2:a1:57:17:94:52:7a:e3:c2:9a:a8:e3:aa:3d:25:d2:
b8:f0:6c:55:ad:8d:d4:5b:61:7c:ea:1c:e2:da:51:da:7d:4b:
44:4c:db:1a:6c:10:4a:29:3a:33:09:6a:6b:e7:1d:e0:14:24:
50:7d:b0:06:ff:f1:8d:19:d6:1e:05:08:ac:56:33:7e:8b:fa:
ae:df:76:48:22:6d:98:b7:5b:71:b8:05:66:18:5b:ec:aa:c9:
09:3b:88:2a:59:5e:7b:59:40:11:8c:b4:5c:e3:dc:cb:4f:e4:
05:82:6c:c5:c9:3e:35:99:0c:8d:7f:d1:58:ae:8e:9f:10:94:
e5:da:65:cf:9d:db:83:bd:40:ff:2c:3e:cc:91:a5:90:69:82:
b9:32:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:23 2025 by rpki-client