Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
File: VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer (raw, json)
Hash identifier: +x2XRlKDP/fDrA4HF5i57cG+vBS4udC8G+DkgDNgKpY=
Subject key identifier: 55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251A639570EB1C7CF6152B3F7CBC74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59496
IP: 91.200.63.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1a:63:95:70:eb:1c:7c:f6:15:2b:3f:7c:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:74:0b:bc:2c:e9:ac:22:08:1e:c2:e9:ca:
82:77:ee:e2:ad:80:ac:b9:2d:dd:50:18:42:16:9e:
b5:7c:6a:1c:3d:4c:cb:c0:77:26:11:3a:dc:e6:3d:
a4:15:24:87:be:9a:1e:64:5a:6c:a6:ff:52:95:c0:
f6:5e:24:6e:ff:a9:8d:ed:3f:d4:03:37:3f:4b:68:
96:c6:99:ce:7a:ea:b0:46:5b:cb:cd:1e:b7:84:48:
80:62:3b:07:13:a6:f4:a4:9e:60:2a:ac:5e:0b:b2:
20:29:6e:9e:b4:4f:8a:cb:91:45:c4:7e:c3:de:38:
e1:52:94:86:3b:0f:c8:89:64:7c:6d:2f:a1:60:da:
39:80:7d:cf:0b:48:c8:28:a1:63:85:1e:61:6c:68:
cb:4a:d6:ae:02:38:28:84:6a:95:fc:ed:79:16:8e:
ed:8e:b1:c8:bb:36:4c:9e:aa:f2:78:e5:aa:41:e8:
29:7e:34:cf:bd:7c:d4:45:81:b7:44:d2:1b:35:ec:
7e:8c:7e:20:a5:ea:02:e8:8e:ee:a3:8f:e6:5b:f8:
cb:f7:77:40:c4:93:df:9b:47:00:37:da:2c:43:94:
dc:0e:61:3a:55:06:ab:21:d4:00:65:01:25:ee:50:
55:cf:8a:1e:1e:ae:55:46:6a:b0:ab:f0:45:f5:66:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.63.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59496
Signature Algorithm: sha256WithRSAEncryption
8e:04:7f:aa:e0:30:15:68:77:8e:56:85:01:db:1f:2f:ff:6b:
ab:72:a6:f5:1e:ec:c1:81:b5:f8:63:71:5f:25:76:05:78:e1:
6d:d4:b3:ac:b8:00:6e:61:ef:27:e9:9f:83:70:fa:69:ce:12:
0f:d5:f7:bd:26:cf:5c:6a:50:15:13:3e:28:6c:34:36:a7:7f:
9b:99:21:a0:55:57:b3:8c:44:01:c3:90:03:da:42:fc:be:a4:
6d:e5:49:9f:aa:e8:9b:75:95:7a:c0:04:d3:10:fb:f5:55:d3:
26:03:1c:35:61:83:4d:3d:d2:25:9d:2f:9a:76:45:fc:5a:7b:
79:0c:e2:29:6f:f4:f5:fa:dd:a9:2b:42:30:84:51:81:29:da:
45:1b:27:3e:7b:7d:fa:9c:bf:a8:3c:81:5b:dd:21:4a:60:a7:
a7:4b:8a:fa:42:8d:32:aa:9b:ea:e0:11:b2:5a:08:ee:60:63:
8a:9a:9f:9c:d8:c5:8e:01:33:8c:b1:54:9f:a2:3c:46:dd:8a:
ec:95:8c:d7:9b:f2:1d:2f:93:a4:37:05:4b:51:63:26:59:91:
9e:13:b6:ea:a3:a3:84:cc:93:3f:fb:f7:80:1c:1b:c4:b6:1a:
5a:92:86:0c:f4:b6:07:a3:f4:ca:24:fc:72:0b:eb:a4:02:68:
af:04:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:46:23 2024 by rpki-client on console-ams.rpki-client.org