Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
File: VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer (raw, json)
Hash identifier: RnFpnoD55907587redK9A7MzzCJ4o6Wv3YIfb4gLZrw=
Subject key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50147272D2E49C443903A709A84D67B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58208
IP: 5.42.152.0/21
IP: 91.216.120.0/24
IP: 185.118.68.0/22
IP: 2a01:45c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:47:27:2d:2e:49:c4:43:90:3a:70:9a:84:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:34:24:73:ee:31:07:3c:8d:a8:6f:ec:7b:
3c:e7:7a:4b:ff:97:70:83:da:2f:a5:66:b7:3b:41:
6f:6f:46:be:2c:29:0a:87:98:a9:6a:b0:f2:b5:e3:
45:91:99:9f:58:f5:28:3f:49:41:5a:59:90:d5:d3:
7a:0b:09:ae:17:a9:14:82:d6:08:d7:cf:4f:2c:59:
33:db:07:93:b5:b0:3b:c4:a4:54:f7:ab:1b:97:7a:
cc:17:e4:10:67:0b:09:90:58:b3:f9:cc:8b:e4:ea:
69:c8:79:0a:cd:ef:1f:fd:fd:7f:74:be:55:ad:8a:
40:b4:fe:c2:fd:98:08:6c:a1:e5:86:cd:2e:dd:d7:
fb:2c:16:bd:d7:dd:9b:b9:bc:35:70:80:13:c6:92:
65:d7:ed:d7:fe:0b:47:3d:24:ee:c0:3c:bc:9e:39:
43:35:5c:86:5b:33:bf:1c:63:d1:2b:45:6e:b8:f2:
11:fd:d0:cb:43:46:0f:ab:36:fe:6c:cd:60:aa:59:
ec:86:0e:87:97:36:67:68:d3:51:64:f4:92:0e:c2:
26:bd:82:89:16:76:df:1d:3a:d2:b2:6e:ec:fc:c2:
83:cb:99:ef:bd:c6:24:3c:98:7f:b4:6c:dc:ad:8b:
b1:7e:ee:46:6d:67:9e:ff:8a:f8:e6:d3:34:64:c2:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.152.0/21
91.216.120.0/24
185.118.68.0/22
IPv6:
2a01:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58208
Signature Algorithm: sha256WithRSAEncryption
ab:fa:3a:4d:6b:d7:f8:59:74:65:5f:42:02:d6:fc:f4:92:78:
35:47:c7:30:59:12:44:ca:f6:44:09:3b:e1:b5:65:8f:b9:c1:
45:d7:0f:8c:34:0b:ee:5d:f6:fb:bd:70:66:16:5d:18:5c:ff:
52:af:fb:56:28:5b:41:fc:b0:1d:44:98:5a:47:c1:14:db:61:
75:b2:ff:55:ac:a3:e6:7a:92:ae:05:a5:f0:1e:5f:44:56:44:
4f:f1:19:7d:5d:07:33:15:5a:62:8e:69:22:18:38:d1:e5:34:
2b:57:aa:e4:af:ce:e6:35:4c:90:70:53:5e:b0:d9:b6:f5:3b:
75:e7:a2:62:fb:5f:7d:6f:e6:54:ee:5b:5b:95:23:77:1c:02:
59:6b:1b:77:30:3a:2e:14:cd:94:29:f6:99:f9:5a:8f:7d:84:
ff:0c:9c:c2:25:46:7e:e1:e3:fc:73:2b:eb:11:39:58:27:3d:
a2:38:14:db:7f:5b:b3:89:e3:40:f6:40:6a:6b:20:48:2b:a7:
2e:f0:15:9b:33:77:18:9d:5a:13:57:93:62:3c:64:51:f2:86:
c1:82:2b:2d:0a:be:e0:b8:d9:b2:9b:31:9f:ea:28:c4:ca:eb:
88:61:ea:bf:12:31:77:10:bf:66:48:71:a1:e3:2c:3e:c3:00:
b2:7e:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:34 2024 by rpki-client on console-ams.rpki-client.org