Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
File: Vc0sjb8xEofr96RanBeoxxBWvOg.cer (raw, json)
Hash identifier: 7Fc0QAvvgnWd9UcFe44naFUyQXBgA3XncKPh9KF0s2Y=
Subject key identifier: 55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBEE82EDC340D741FF073B7F1D6374
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.217.177.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ee:82:ed:c3:40:d7:41:ff:07:3b:7f:1d:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55cd2c8dbf311287ebf7a45a9c17a8c71056bce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:90:d7:72:78:2c:3a:c6:aa:7a:c9:a6:2a:
e6:df:3e:aa:87:52:66:17:6b:9b:89:bf:be:37:83:
7a:30:84:c9:88:ca:6b:86:db:eb:04:e6:1c:60:95:
cf:da:a5:07:59:82:2f:86:b2:51:ba:f1:6f:e7:0d:
2e:6f:14:cd:8c:4f:4a:3f:79:df:7a:6f:41:67:77:
7c:5b:41:39:b2:79:ba:62:17:32:18:81:c8:3c:73:
c3:36:04:ad:56:fa:94:09:bf:e5:88:fc:60:64:e7:
34:14:e0:dc:e0:ad:d6:50:ab:d5:80:48:7e:6c:7f:
80:11:a6:45:70:43:ea:e5:f2:61:7a:4a:57:95:29:
71:59:de:3a:27:28:f2:dd:d8:96:60:23:0b:f2:50:
1c:f4:9a:2e:fe:90:f2:0e:c7:fa:2c:95:92:93:57:
3e:bf:c7:34:85:60:1b:83:52:88:a4:32:db:e8:a2:
e7:15:d6:f3:e9:66:f7:eb:ab:af:62:dc:1b:c7:f9:
82:92:9a:8f:f0:a0:c9:f8:67:ca:70:b1:0b:42:37:
40:70:0e:de:14:c7:1f:aa:ab:75:0c:94:33:d7:5c:
ad:8f:bf:04:6f:c6:40:25:7d:b6:91:06:44:50:73:
97:77:f8:32:7a:58:31:65:fd:38:f0:df:e1:e1:7a:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e2:2d:4e:68:d8:fc:48:73:19:e8:16:af:a8:d2:5c:09:55:
df:b6:21:30:63:b4:ae:82:9a:8e:de:16:4b:80:9c:47:f6:54:
81:01:63:cd:3f:7c:e5:57:66:1f:46:4e:84:44:1a:2f:9e:26:
9a:55:5e:ba:0e:20:08:7c:3f:4e:c4:05:5c:fa:68:92:9d:4e:
fa:ae:6a:56:e4:98:bf:20:1d:a2:e8:6b:d6:e0:87:a7:38:7e:
9d:f3:c3:3e:41:88:e9:a7:3e:82:e9:90:4a:98:4a:1a:74:a5:
4b:93:82:60:af:4a:c0:90:e1:ed:08:79:cd:f7:ad:9f:5f:e1:
74:2c:e4:b1:f8:0a:18:ad:a3:74:af:5c:ba:ab:2a:0c:fe:8c:
d9:eb:3b:52:d4:4f:45:65:7c:57:a8:ac:e8:64:6c:42:82:fe:
60:1b:69:04:fb:56:b3:f6:9b:7c:0d:eb:11:8d:cf:1d:a3:fe:
8a:29:54:b0:67:a7:28:3f:0f:0c:81:bb:a6:47:61:26:cb:d0:
fe:d5:53:5d:3b:28:1c:32:0a:bc:0b:92:81:bb:fa:95:30:15:
e7:d3:0f:ce:a1:ea:50:e2:c4:78:44:d4:25:0c:12:78:91:fb:
63:e0:0e:ec:fc:6d:ec:1c:f2:d5:71:23:11:d6:c3:8b:13:d4:
5f:9f:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:31 2024 by rpki-client on console-ams.rpki-client.org