Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer (raw, json)
Hash identifier: xsLF2etmpava9vgg+Sth0TvXa44vJpY+/oE1gmCW0Tw=
Subject key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEB5113BDB49D41B68662850A3DE329FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Feb 2024 16:06:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 89.150.63.0/24
IP: 194.176.117.0/24
IP: 195.5.104.0/24
IP: 2a13:14c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:51:13:bd:b4:9d:41:b6:86:62:85:0a:3d:e3:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 16:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:ef:05:06:d3:61:57:f1:35:1c:dc:ac:ed:
8f:76:29:af:56:9b:c2:2b:83:eb:43:7f:91:be:ce:
64:09:cf:e7:65:c7:7d:19:6c:5d:fc:52:6b:5f:57:
1f:78:3a:cb:13:0d:0f:42:fa:29:45:b6:4d:6d:e4:
fd:d6:ac:34:cf:78:ed:7c:81:6b:36:4c:7e:39:cb:
29:04:be:1c:7a:fc:24:aa:d8:69:08:11:f6:58:99:
e6:d4:75:2e:4b:7e:0f:08:9d:20:54:9a:08:7a:18:
0e:4f:ce:1c:ec:8f:b4:5d:d8:a1:b9:dc:5f:50:f2:
16:5f:4c:17:b5:fa:fe:0f:0c:f6:a0:43:2c:85:ca:
de:9c:c2:3f:93:5b:37:8a:1c:c2:00:64:37:12:fe:
4e:66:38:a7:11:09:ba:17:e3:af:88:b0:20:7f:b2:
5b:60:e0:78:d7:e8:cf:c4:e7:06:21:19:61:55:3a:
f5:5e:a9:67:4b:c2:12:f4:05:d8:5a:98:60:14:dd:
65:aa:da:97:8a:28:66:a9:a2:ae:0e:f4:35:e1:02:
8b:53:0a:aa:dd:26:58:76:87:61:f1:55:73:c7:0e:
ba:34:77:15:e5:d6:f0:bf:b5:bc:12:9a:3e:9e:00:
e2:20:72:1a:85:2d:a5:32:9e:41:ce:13:69:ce:82:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.63.0/24
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:0b:dd:3e:9c:29:d3:fc:56:de:49:8c:8d:ef:54:4f:6d:da:
9d:6c:aa:54:8f:69:11:f5:46:d1:c3:d6:df:68:2c:c1:e7:5a:
33:0c:99:c7:4a:39:41:de:4a:34:ba:b9:10:6f:8f:eb:c7:8a:
df:f7:37:5c:d7:92:1e:ee:85:27:79:5f:b6:32:ad:f7:4b:b2:
87:56:d3:4c:e0:96:9d:52:6a:8e:fb:bd:9a:3d:ef:da:e1:4c:
41:76:63:34:a1:90:7b:cb:bd:c1:e9:b7:3e:82:51:55:ed:ce:
fc:5f:68:3e:83:c1:4d:5c:80:b9:ac:f4:52:06:2e:22:b4:74:
8d:6c:35:d7:5d:2a:7d:d3:eb:b0:c3:d8:50:01:29:d3:96:de:
16:4b:9a:85:94:01:e1:73:fa:2a:25:34:5b:0f:6d:95:ec:e1:
3d:04:51:50:41:5f:9f:42:cf:d0:e1:c4:2b:1b:29:22:2e:9c:
bf:e2:99:f8:bd:55:bf:6e:7e:70:6c:ca:db:b9:ca:81:37:a6:
b4:37:fd:0b:e5:34:77:a0:7c:19:4c:f8:ea:3d:66:2f:c7:b6:
44:84:0d:d9:4f:b8:b0:79:fd:0b:78:7a:c3:ba:ff:71:dd:8c:
b4:db:36:ed:84:36:24:12:ad:d3:e2:2e:c2:9a:82:82:b3:c6:
bd:31:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:02 2024 by rpki-client on console-fra.rpki-client.org