Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer (raw, json)
Hash identifier: EFG8d/w80J66OG9Yi1PfUK7nUkR0/T5oyDeQPvqoSho=
Subject key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FA706A9B8F425205DAECF7E205CA73A05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 May 2024 19:56:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.232.252.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:06:a9:b8:f4:25:20:5d:ae:cf:7e:20:5c:a7:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 23 19:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:3d:10:50:3b:ea:b2:70:bb:fe:de:0f:45:
95:b7:f2:05:03:81:c1:30:de:95:e7:1c:00:a5:58:
6b:80:25:9e:b5:a8:97:19:c1:2a:63:2f:f1:67:ec:
04:49:83:00:35:a7:e4:eb:24:74:67:28:09:47:90:
d8:72:32:ed:fb:36:c1:d3:dd:36:9e:78:1e:da:57:
46:fe:18:56:49:57:e0:2b:32:b8:f7:e6:a4:34:b2:
60:d9:9c:83:cb:0b:35:a4:6e:3c:f4:a6:bb:b9:0a:
b3:10:82:13:83:ab:25:17:78:d9:a0:93:7c:aa:c2:
a9:33:b2:a9:71:09:e3:78:6d:90:3a:df:55:2b:9c:
c9:b0:2c:fb:9a:35:41:9f:6f:bc:ad:56:56:f6:8b:
b8:03:e9:a2:f4:2b:25:32:62:c1:fa:ef:d8:ff:12:
01:64:d8:58:27:b4:0b:eb:fe:91:cd:49:b1:52:55:
a0:4e:11:c3:2c:bc:f7:6b:36:f0:4c:f1:95:f3:8d:
9d:c2:c8:db:47:aa:68:7c:78:b2:de:b4:4b:a2:45:
14:07:1d:95:3d:b8:eb:36:12:e2:3c:09:52:78:76:
5f:e7:aa:2f:a8:86:17:dd:99:8b:de:c3:25:f5:9d:
dd:b4:48:32:d8:d7:11:01:fd:95:c2:f8:37:f2:24:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
33:a1:ef:98:16:59:14:ef:85:f0:e1:46:03:02:e0:57:8c:0c:
ba:71:98:fe:e8:52:03:44:9d:aa:ee:9f:d4:bb:82:1c:cb:f5:
a4:f7:bc:4a:72:e8:68:e2:bd:00:8a:09:bc:00:2a:d2:1e:82:
98:e6:a0:08:32:7c:45:8e:8b:c0:3c:5c:7a:f0:db:fe:6d:78:
c5:21:77:a0:df:e5:c5:6f:3d:c5:8c:eb:f4:cc:5d:fd:29:5e:
37:b0:8f:81:42:bf:11:db:cc:29:9c:08:d8:28:5c:32:c5:b5:
c1:2f:75:ad:ad:86:56:dc:11:1d:c5:6d:03:7a:9c:e7:3d:e2:
86:d1:56:12:04:6b:7e:00:24:f0:b5:f5:e3:ba:df:71:c0:ee:
75:08:e6:d8:dd:3d:84:02:6c:14:8e:c9:09:f8:d5:85:42:77:
38:37:4c:22:66:ab:a5:c7:8e:4e:0f:69:7a:0c:6e:2f:02:8a:
6e:b3:13:f3:2a:5d:01:97:07:a3:94:87:73:25:1a:26:f2:e8:
8e:f3:ac:92:33:2e:21:4f:8d:0f:44:5e:ab:04:48:a0:35:c5:
13:eb:e0:6f:c7:74:02:47:2f:de:d6:b8:b7:e8:5c:21:36:2f:
dc:d8:74:4d:e4:1b:a0:7a:29:67:7a:8c:66:94:d4:95:f4:43:
dc:31:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:06 2024 by rpki-client on console-fra.rpki-client.org