Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VvF2sWX6p_gRMUZNp2pYA91VVs8.cer
File: VvF2sWX6p_gRMUZNp2pYA91VVs8.cer (raw, json)
Hash identifier: 6FXUobAP1wWIM5dYoIYJghZ0tKVw76aIcNetDgGVpqY=
Subject key identifier: 56:F1:76:B1:65:FA:A7:F8:11:31:46:4D:A7:6A:58:03:DD:55:56:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938FB41DAFD65DBC644C9A6E94AFA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/sky/0/56F176B165FAA7F81131464DA76A5803DD5556CF.mft
caRepository: rsync://rpki.co/repo/sky/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216138
IP: 2a14:3000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8f:b4:1d:af:d6:5d:bc:64:4c:9a:6e:94:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56f176b165faa7f81131464da76a5803dd5556cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:ef:86:b7:87:f9:63:1f:a0:72:d1:79:96:
e9:e1:e3:a6:bb:c4:9f:aa:2a:8a:f9:20:d5:40:a1:
9f:9e:0f:b0:ad:2f:2a:21:93:1b:cf:3b:31:8b:58:
19:47:52:31:b3:63:a3:b9:03:ec:23:ff:04:a9:5d:
2c:96:50:ee:c3:96:3c:f1:11:62:92:85:4c:94:26:
8d:64:54:50:8f:5b:44:17:7f:77:90:2d:aa:f5:a7:
7b:a4:0b:dc:22:4a:35:a4:40:e0:40:fa:2f:1b:3b:
d6:06:e9:cd:b4:20:63:63:4d:6e:94:47:b2:d3:ed:
13:ff:c4:94:76:53:99:14:b2:74:52:11:a7:2d:e0:
db:93:11:29:9b:68:90:b1:9c:5d:7b:a9:03:c8:bc:
81:5b:64:04:b0:2a:79:af:54:d0:47:c0:65:16:3a:
f2:56:fa:51:2d:d1:ec:c5:b5:97:0b:da:cc:6d:c6:
39:6a:d2:6c:7c:b1:71:ff:a2:e8:77:6c:96:40:ad:
a3:5d:3c:68:84:ce:18:74:4b:e2:84:f4:bb:8e:db:
f0:c9:02:b0:6a:68:49:50:f0:0d:87:9e:c6:31:eb:
3c:d2:5d:3b:c7:62:cc:c5:cb:c3:b2:02:23:d4:21:
bb:3a:8e:b3:cd:33:ed:f1:4d:d3:23:05:31:45:25:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:76:B1:65:FA:A7:F8:11:31:46:4D:A7:6A:58:03:DD:55:56:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/sky/0/
RPKI Manifest - URI:rsync://rpki.co/repo/sky/0/56F176B165FAA7F81131464DA76A5803DD5556CF.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216138
Signature Algorithm: sha256WithRSAEncryption
84:78:b3:f2:e4:e9:dd:76:18:30:fa:43:11:b0:a1:8f:c0:6e:
74:b8:06:bf:f8:7f:5d:e3:43:68:a8:c8:a3:f6:26:39:c9:61:
91:0f:82:a6:eb:d9:24:bd:3e:de:b8:29:53:b1:8a:f1:56:3c:
e0:87:07:09:de:8c:aa:58:12:06:a7:b1:b8:a0:53:ae:a4:b7:
89:0f:f9:eb:aa:ee:57:d2:9b:c9:83:01:75:c1:5e:90:44:c6:
61:c9:ec:f7:05:77:94:24:25:07:91:31:ea:28:cd:ee:5d:b3:
19:05:51:9f:f2:17:d7:07:b6:ef:c3:61:63:43:67:42:55:47:
08:b5:e8:ae:fe:6a:23:30:e9:78:af:64:00:54:9f:66:b5:7b:
c6:b6:26:1a:ea:53:f6:21:02:6b:75:38:52:12:9f:31:e5:84:
87:7b:6f:aa:24:e0:ca:50:1d:df:aa:61:9f:e6:e6:0c:c8:c2:
51:ee:0d:c6:cb:bf:1d:98:20:e9:4c:58:13:24:1f:83:10:24:
1b:1d:66:2f:4b:4a:65:01:aa:f1:6c:4a:46:68:3e:77:6c:6f:
d0:b2:11:05:80:3b:ed:ec:21:55:d3:6b:4c:5a:7b:6a:a6:a4:
9f:0d:7b:5d:f0:1e:a3:75:10:f7:c3:f4:22:05:59:be:02:8e:
42:76:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:46:31 2024 by rpki-client on console-ams.rpki-client.org