Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
File: VyWt0r_z5miuGFVL7r8xojpp3aU.cer (raw, json)
Hash identifier: 5HnIYT5p40rTZWujY9CiQnwBPy+oS0GVb2sNvKAqD6o=
Subject key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE6F25E792C2B73CD6ED23547B1E1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12823
IP: 193.53.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6f:25:e7:92:c2:b7:3c:d6:ed:23:54:7b:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5725add2bff3e668ae18554beebf31a23a69dda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:4e:51:87:b2:1c:7f:9f:01:35:fc:ae:15:
4a:ec:1d:bf:ee:37:2f:45:ce:6c:6b:cc:3a:6f:0b:
eb:84:5e:a5:23:78:ac:99:41:d7:5a:3a:81:8f:ca:
1c:33:c3:5f:e7:e9:76:86:d0:4a:86:28:33:4f:74:
17:7a:12:23:33:fa:7a:d4:1a:1d:22:14:39:e0:95:
4b:24:b2:38:24:1f:2d:37:61:66:44:9f:d2:67:b0:
6d:ee:0e:da:97:37:4f:d4:4f:ba:7c:a5:2f:8e:bc:
67:f5:b3:d5:63:dd:8f:c0:05:2e:06:eb:3a:85:23:
59:fa:2a:b6:3e:93:1a:1f:60:a9:15:a8:c4:ea:e0:
d1:d9:e6:dd:1f:ca:7b:67:dc:b8:b4:9a:1a:6c:52:
30:66:7e:34:11:97:71:4e:e3:3e:99:63:6e:25:1f:
08:54:07:e4:1a:4c:d1:a6:b1:33:aa:6c:d5:4d:da:
69:bd:e4:e0:c6:44:36:56:74:58:7e:70:99:c5:9c:
db:cf:f6:e4:fa:0d:d9:86:b0:e9:f2:9e:76:18:7c:
c2:51:df:3b:19:c4:2d:c9:d7:62:43:dd:71:00:78:
05:11:07:e1:82:17:1b:95:9e:e8:3c:cf:64:d5:db:
24:f4:b5:12:e6:ed:ce:df:16:49:ee:4c:80:5a:09:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12823
Signature Algorithm: sha256WithRSAEncryption
47:6c:45:fc:c5:03:c7:db:ce:ca:76:3d:4d:31:fb:25:e1:3c:
21:68:11:50:d0:79:ad:94:15:14:fd:f3:a8:42:be:2e:01:28:
95:19:bf:8a:ee:59:80:6c:0d:a1:65:2d:d9:a0:cc:12:a5:be:
23:98:31:b0:bb:d2:d8:59:94:b3:0e:1f:bf:53:33:e0:69:98:
c0:f5:2b:ba:86:43:76:bd:98:fe:61:99:69:f2:8f:93:b5:df:
0a:9e:be:74:1d:bf:5b:bc:2c:2e:d6:c8:6b:a4:64:00:4b:88:
8f:4b:d6:ec:e7:f6:62:95:99:81:49:b0:7c:ee:80:7d:47:ce:
14:3a:45:56:df:9c:90:4f:ff:83:96:d1:2f:89:77:6d:94:ad:
75:09:1d:29:31:cf:a8:e7:56:1e:b0:98:69:5b:5d:f5:fe:1a:
51:f8:34:8b:b4:be:ba:71:94:b0:7b:64:e3:fb:50:65:91:41:
9b:77:f9:ce:5e:f6:f0:9f:b8:b2:5d:b6:69:6f:e7:21:4b:08:
d9:24:3e:9a:61:fb:40:4d:1f:63:60:bb:b6:6a:85:3b:6d:78:
2c:c7:ae:c2:15:7c:cf:58:e7:6f:41:c0:aa:ea:7d:54:8d:d9:
bd:0e:f5:8b:19:ad:b1:cd:24:1d:77:d8:36:48:72:0b:6b:8d:
0b:1f:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:18:59 2024 by rpki-client on console-fra.rpki-client.org