Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer (raw, json)
Hash identifier: 4A3zpd8OzgNDyBN6/A7PX+rCW9xGAbIenhpKfB+40JU=
Subject key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EDBB256439CB8DD66D2D8DF8640EA49ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 14 Apr 2024 08:21:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215333
IP: 91.90.163.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:b2:56:43:9c:b8:dd:66:d2:d8:df:86:40:ea:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 08:21:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559a769412d2d963b491ebe31d44111dcafccc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:46:3d:68:9f:d2:b5:fb:d8:33:5c:2c:6d:
ca:26:9e:ee:57:f2:65:6c:86:0b:05:d2:ba:d0:37:
ba:b5:26:50:a5:10:74:46:ef:d6:e2:b8:cf:76:c3:
c9:bc:10:1c:3e:34:b2:1f:19:28:56:96:78:06:cd:
1e:fa:32:03:ac:55:43:17:2a:28:53:b3:66:18:88:
83:f6:a1:8a:d1:e4:c3:3f:35:1c:2e:be:9d:b4:35:
ce:8b:4d:a8:64:8a:17:58:f3:f1:71:92:85:f1:72:
cd:af:60:40:d6:5f:79:f3:43:8c:f0:98:9a:df:47:
89:2c:c0:1b:25:87:e8:4c:8e:17:88:ff:58:4c:4c:
20:66:55:e2:7a:5c:bd:e6:cb:46:20:8b:df:00:cb:
d0:e8:2c:f8:18:ee:c6:d8:ae:91:1f:d9:a1:9e:6a:
06:04:1a:33:81:43:74:06:7a:21:57:28:9e:58:9e:
aa:65:52:a3:19:ec:60:b7:68:ba:eb:95:f7:e7:2d:
3b:bc:48:44:f2:45:04:d6:38:7f:73:1c:53:e4:ef:
59:aa:f4:41:33:32:86:1b:e0:bd:3b:5c:bb:e8:29:
21:c6:ca:15:09:cf:37:c9:f3:cb:96:02:6f:70:44:
cd:08:cb:ca:05:b6:9e:d8:e2:1d:9a:b0:4a:c8:8d:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.163.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215333
Signature Algorithm: sha256WithRSAEncryption
1e:ff:b4:79:24:41:2e:22:08:40:09:93:58:71:08:f7:a5:ed:
19:1f:09:0b:47:69:b3:a4:fb:e1:15:df:27:34:b5:36:79:53:
c0:1b:9a:e6:32:c6:da:e3:12:03:3d:2e:3a:b9:3d:e8:d2:1f:
cc:ea:d2:6c:e6:ec:34:7f:83:17:f4:4e:ab:22:01:ed:81:e5:
c6:22:a6:04:b3:ef:3e:01:09:d9:fb:ba:c9:70:f2:dc:3d:a0:
80:47:92:13:b9:f0:ea:4b:53:6e:1f:70:73:e8:ad:17:23:51:
53:ab:f1:d7:f4:64:7d:f2:94:00:c4:c4:f5:7d:e5:c1:a9:63:
96:e6:51:19:f1:96:43:c8:20:94:86:8f:81:d8:05:87:dc:b7:
08:9e:5d:ff:0b:48:64:69:2c:5e:d2:cd:6c:81:2f:51:2a:b5:
c3:1c:e3:9d:33:06:2a:88:1b:c5:fc:3a:f7:f5:d7:cf:5f:32:
eb:a4:ae:fb:32:12:ca:84:25:e9:2b:7f:e3:b6:13:31:8d:0e:
f3:b1:a4:47:80:6b:f4:f3:78:82:a6:19:57:ea:12:35:df:d0:
29:0e:d9:59:e3:8b:87:58:63:68:07:2a:e3:ed:65:20:aa:a0:
53:22:b0:04:8f:38:d3:cb:c3:85:0f:8a:47:c8:37:19:b7:ee:
dc:af:dc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:01 2024 by rpki-client on console-ams.rpki-client.org