Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
File: _VPDr_MeJ9KhvE2bPudbuKm1eDg.cer (raw, json)
Hash identifier: ks6t3LXQ1sIhIVBDZtQeeAIEvrM67lYlUJg6YUGWrso=
Subject key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79367B3645B1F0905AE985037A69143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196810
IP: 89.207.232.0/21
IP: 178.23.168.0/21
IP: 185.15.200.0/22
IP: 185.170.16.0/22
IP: 185.213.204.0/22
IP: 185.224.40.0/22
IP: 194.104.2.0/23
IP: 194.104.86.0/23
IP: 2a02:ab40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:67:b3:64:5b:1f:09:05:ae:98:50:37:a6:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:80:bf:28:f2:05:d4:8a:f2:e2:fa:61:dd:
5d:9c:ad:0c:78:5e:1c:83:0e:3a:6b:13:22:fb:01:
8a:70:ea:9a:90:cb:45:66:73:82:aa:d1:ed:85:25:
ef:e5:ce:9b:33:bc:1f:fc:56:35:8e:09:68:85:84:
78:a9:14:07:9b:50:14:86:4f:0e:eb:d2:98:7a:ed:
7a:45:b2:4e:fe:71:84:11:55:d1:2c:49:08:2b:bc:
8f:2d:ec:4f:07:92:0e:fa:be:c2:dd:5d:03:2b:04:
48:a2:b6:c6:9c:1d:be:e7:b8:23:5f:b0:52:87:40:
ff:61:ed:38:d9:5b:dd:a5:7f:7f:df:a8:bf:9b:b6:
f1:80:ae:ed:1d:39:57:71:96:77:86:57:8f:f9:5c:
2d:1e:ac:be:7f:39:58:00:e1:98:2d:5e:e8:1f:5c:
f5:21:d3:ac:86:5f:6f:e8:81:af:6a:c2:6a:d5:85:
76:72:9e:21:54:92:ae:96:e1:69:bd:c0:5e:f5:91:
05:3c:d4:43:05:4c:36:3a:c4:83:4a:14:c1:43:6d:
14:22:cf:ec:51:e7:5d:96:b0:d0:c2:78:46:af:e4:
b3:59:67:e4:0c:89:19:1a:e6:3e:1c:31:46:a4:34:
7a:7b:18:f8:68:ed:b9:30:e4:4c:32:de:86:3f:6a:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.232.0/21
178.23.168.0/21
185.15.200.0/22
185.170.16.0/22
185.213.204.0/22
185.224.40.0/22
194.104.2.0/23
194.104.86.0/23
IPv6:
2a02:ab40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196810
Signature Algorithm: sha256WithRSAEncryption
23:a8:09:fb:cd:44:65:f8:07:53:09:35:d0:f0:dd:96:2f:f8:
1b:98:b7:c9:88:7f:2b:5c:82:7a:ec:5e:ba:3d:3b:83:55:8b:
5e:e6:5b:6a:96:3d:71:e1:97:fb:ff:f7:f8:3d:ba:80:ac:8f:
dc:f1:35:54:ec:07:d6:c1:bc:8e:c4:e5:84:0a:bc:6c:25:3d:
6d:0f:bb:06:0a:5c:5a:82:aa:6a:11:6c:1d:f6:12:c2:98:0e:
fd:b7:de:ee:20:96:d4:1a:76:86:88:c1:bd:1f:31:ac:38:50:
32:96:78:ba:13:82:39:3d:a8:21:d1:85:70:f2:f9:6d:08:0a:
34:d4:91:d5:a6:bb:1b:97:40:72:b3:70:b0:36:6a:8b:51:87:
20:30:a3:70:20:09:7f:15:44:5e:7e:d7:30:42:e3:8d:18:76:
7d:8d:d7:b3:33:a0:aa:01:bd:a4:7b:21:6a:75:bc:00:64:96:
f9:af:3a:df:a7:95:02:a1:a1:2d:cf:6a:26:2f:36:77:89:f2:
a0:a3:0d:f9:0a:79:28:9c:81:ee:05:c2:96:6a:ce:13:56:f1:
29:c5:58:71:6a:01:df:70:07:17:73:56:b5:2b:eb:6e:9f:68:
21:88:ce:5e:f4:95:ab:56:0b:67:05:d8:f3:f6:8f:a8:09:4f:
15:05:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:23:20 2024 by rpki-client on console-fra.rpki-client.org