Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
File: VtV_bPKMmCwdP_bFJX85npuVW90.cer (raw, json)
Hash identifier: 7+aFXOR88Vjies2f/tRly0bNgWTn1F1/kW72ylTpMFQ=
Subject key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DACCC69EB592DDEC89D8D16BB251A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39015
AS: 51375
IP: 37.131.0.0/17
IP: 46.42.64.0/18
IP: 46.184.128.0/17
IP: 87.237.192.0/21
IP: 93.188.192.0/21
IP: 94.76.0.0/18
IP: 95.84.64.0/18
IP: 109.63.0.0/17
IP: 178.132.32.0/20
IP: 185.36.88.0/22
IP: 185.143.124.0/22
IP: 188.116.192.0/18
IP: 2a02:2578::/32
IP: 2a02:c400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cc:c6:9e:b5:92:dd:ec:89:d8:d1:6b:b2:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:dc:55:e1:51:73:36:c0:12:af:75:04:9e:
46:1c:a1:60:d6:a9:62:d2:5c:1b:68:db:56:21:88:
7c:f4:7a:37:9b:4f:81:b7:27:1e:a5:13:95:dc:c9:
8c:8e:21:73:11:cd:ba:39:e8:87:b7:20:e6:c9:f3:
b4:79:9d:84:2b:30:00:c7:21:48:eb:00:43:f8:17:
c5:3f:ab:a9:62:62:0f:0f:87:7d:e8:8d:c4:b1:95:
c8:6a:5f:19:b5:cc:47:5f:e8:68:30:6f:c7:9a:53:
99:ed:2c:d9:54:92:1a:12:a9:21:f2:72:db:e4:15:
2e:f3:8b:59:71:16:fc:c5:43:07:f3:d7:26:22:1d:
66:eb:49:22:7d:6c:63:75:99:90:61:46:c7:d1:43:
15:2d:10:b6:a5:0a:61:c9:77:ce:a9:27:b0:63:40:
7c:d2:e0:ef:ad:da:e5:bc:2f:ea:fe:2b:ce:8f:47:
30:14:e8:bd:a9:6d:c5:f2:f0:c1:49:ee:ac:b7:03:
50:0c:0c:63:f8:66:4e:64:f5:65:cb:50:b2:62:c1:
d9:fe:bd:63:9e:83:3a:42:8b:4e:9c:c0:b2:57:09:
d2:d1:0f:43:bd:36:5d:ff:4f:18:01:d9:72:6b:dc:
c3:db:28:e8:2e:ef:b5:f0:0a:cf:b4:9f:19:7f:4c:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.0.0/17
46.42.64.0/18
46.184.128.0/17
87.237.192.0/21
93.188.192.0/21
94.76.0.0/18
95.84.64.0/18
109.63.0.0/17
178.132.32.0/20
185.36.88.0/22
185.143.124.0/22
188.116.192.0/18
IPv6:
2a02:2578::/32
2a02:c400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39015
51375
Signature Algorithm: sha256WithRSAEncryption
ab:6f:72:b8:a8:db:01:91:65:64:b4:09:c0:66:11:19:ae:32:
42:bf:d5:41:4d:b1:84:2b:71:fe:42:f0:a9:e6:5d:fd:d8:84:
2f:1d:3d:38:60:6d:13:42:d7:82:09:bf:03:52:4b:15:51:be:
d5:a6:2c:d0:d0:db:7e:ac:4a:fa:3d:36:9f:b8:e8:20:07:86:
92:9a:92:87:2d:8f:e7:de:8a:2e:43:6f:10:43:1f:81:29:7a:
a8:22:30:83:d9:25:db:64:11:86:e8:8c:8b:7c:2e:38:75:e2:
bf:c9:82:32:8c:dd:86:4d:1b:35:5c:86:1c:84:99:27:8e:d2:
a8:0a:79:84:87:27:5e:3e:45:ba:96:36:11:75:10:0a:92:4f:
f4:a5:44:07:1c:0b:4c:44:6e:8d:1c:dd:33:9d:d6:69:3e:0a:
46:f4:ba:7e:fb:e4:0f:a1:34:47:6a:d4:01:02:96:b1:95:87:
8f:09:fb:22:d7:fb:15:8e:eb:c2:f6:a5:0f:49:7b:b4:97:4c:
be:ee:c0:36:fc:7c:d5:16:bb:e7:6c:81:98:df:d6:27:50:64:
8e:bb:b5:44:8b:9d:89:84:78:ae:ff:98:4b:16:32:4c:56:bc:
6c:20:54:61:0c:4b:3d:69:ef:54:2d:ed:9f:e9:4e:20:0e:64:
12:cf:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:18:55 2024 by rpki-client on console-fra.rpki-client.org