Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
File: VmhcNSHqj-av5l1TOjsZno92UFs.cer (raw, json)
Hash identifier: BxYluo0pg7pt36JXpYfSWrr2BPbAnwmUfk7PTzaVWZk=
Subject key identifier: 56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC1B35CFDE2BFD9277825F6E7C58A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208958
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1b:35:cf:de:2b:fd:92:77:82:5f:6e:7c:58:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:66:51:54:3e:26:79:d2:44:a1:4b:d4:ca:
45:75:73:62:81:44:c0:34:fb:61:ff:16:c5:e8:2d:
86:e4:5e:e1:b8:2e:c7:39:40:16:0a:06:55:ff:1b:
ec:5b:05:66:bb:ac:65:ca:bb:05:d8:47:07:f4:1a:
9c:16:14:1b:58:79:28:22:2a:be:76:4f:43:0f:76:
ac:a4:71:d7:7a:a7:63:b2:19:9a:4e:84:12:89:5c:
48:7e:a3:e2:af:2b:6d:71:fb:51:92:24:80:a3:7f:
43:f6:cd:b7:1c:f7:58:53:46:44:3d:d5:b7:d7:52:
55:1a:a1:b2:37:8b:f1:a3:61:14:4f:8a:42:a7:b5:
71:12:af:5b:ae:f1:03:90:dc:8c:56:ff:72:46:26:
cd:f7:05:77:38:12:27:db:ec:0c:42:7f:9b:c9:c8:
bc:7d:51:f3:14:4b:e6:0a:d8:f9:9f:58:1a:b1:c0:
b1:ca:85:48:ce:2b:11:0f:f2:53:b7:56:f2:c8:2d:
80:76:78:e8:83:5f:1a:69:71:df:2a:9a:42:63:6f:
9a:7d:af:aa:c9:34:f9:19:ce:c6:d7:eb:99:36:2d:
19:a7:3d:b3:23:bb:8c:61:5a:53:cd:3c:4c:d0:5a:
09:21:7e:31:37:89:b5:63:74:ab:6f:b2:9e:56:32:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208958
Signature Algorithm: sha256WithRSAEncryption
49:94:aa:43:e3:d4:b0:42:b8:ab:b4:66:88:d6:3e:8f:c8:85:
ce:db:b1:5d:0c:12:b4:ae:83:71:9c:cd:eb:5c:3c:0f:5f:7d:
a9:1c:55:b6:d2:0c:3e:df:7a:37:45:9e:f2:4d:92:0c:ad:25:
d9:6a:a5:15:65:70:cb:ca:05:e0:25:cb:0a:dc:bc:27:a7:b8:
f9:2c:61:90:37:85:33:94:c1:11:22:9d:d3:70:22:06:6b:81:
d1:71:1e:f1:89:21:d0:a7:c9:8b:77:f0:02:fe:68:7c:19:21:
84:dd:66:e3:a7:54:3b:9d:02:9c:5d:5f:12:38:ff:63:e2:bb:
ef:37:83:09:f7:f3:c2:1b:ba:40:2d:02:fa:c0:4e:c2:8b:7c:
e9:d7:37:a1:27:6a:19:a9:81:b0:07:6d:25:22:bb:83:39:12:
e7:22:1e:43:70:fa:46:93:69:de:2c:31:a2:de:f4:b2:a5:6f:
28:ab:66:ef:b3:59:12:75:4c:e2:5a:30:87:17:23:0b:ee:76:
86:9c:0e:b8:09:a7:67:94:75:fa:ac:0e:b0:84:57:ae:55:2e:
09:80:03:6b:85:d0:22:cb:20:1a:bf:1b:4c:a2:b2:d7:fe:86:
ec:d4:aa:fa:40:ca:44:fa:bd:e6:58:45:52:2f:00:62:38:1e:
e4:a6:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:06 2024 by rpki-client on console-ams.rpki-client.org