Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
File: vB0gk2YmtVdDxllFEt5C75-OkF8.cer (raw, json)
Hash identifier: HslJIBJTJLl6VYsCebl2uXlJP2mBS+W9V4AKIM1GtMs=
Subject key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489D12075D6DAB003F97B14AD612C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.56.104.0/22
IP: 2a09:c240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9d:12:07:5d:6d:ab:00:3f:97:b1:4a:d6:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:74:87:ba:4a:0f:c7:71:02:16:81:4d:8f:
67:be:86:29:3a:4a:f0:a7:f9:d8:78:63:0e:81:41:
82:25:cc:1d:82:c4:41:d1:c8:7a:54:e4:28:a8:fb:
1b:f4:53:db:f4:0f:48:b5:60:b6:2c:e6:47:3d:a3:
a2:0a:a1:cb:d4:a3:36:0a:60:28:20:05:d5:8f:53:
8c:a4:66:74:f7:7b:19:d9:81:e5:44:91:00:07:0d:
29:44:b1:56:9f:19:03:a4:f9:2b:c1:50:99:bd:40:
f7:b1:82:6c:59:20:31:08:ee:d1:08:3d:1f:55:07:
ff:c0:bc:ef:37:02:31:97:6a:15:e7:48:bf:41:ab:
3b:9f:e9:df:52:b1:57:fe:7a:3c:fb:84:a1:54:bb:
96:28:03:c7:e0:e0:88:d4:35:1f:04:0a:8f:a6:28:
b6:8a:dc:24:e6:bf:35:bb:c4:0e:3e:86:0d:ce:f1:
d7:1b:2d:ce:a6:53:f7:a9:d0:e0:ec:db:3f:d0:51:
ae:1f:ba:92:a1:da:c5:12:a7:70:2d:2f:2d:53:ad:
3f:07:79:bd:e5:c5:3e:c0:f2:85:33:9c:f0:22:45:
1b:ac:88:81:6c:26:40:d8:0e:55:c6:f2:23:e0:ab:
af:54:91:48:ce:27:ee:18:4c:55:dc:a3:84:12:ff:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.104.0/22
IPv6:
2a09:c240::/29
Signature Algorithm: sha256WithRSAEncryption
97:31:13:b2:20:96:f5:cc:4b:e6:a9:90:88:71:82:32:cc:b7:
62:3b:53:c8:c2:8e:20:ba:e5:22:6a:a1:bc:a9:d4:5a:d3:13:
cd:23:fe:04:d4:59:7c:2e:fc:a8:a2:74:52:6b:15:b9:22:b0:
14:3f:60:fc:12:43:a3:5e:46:39:91:88:f2:f3:31:e2:f8:f6:
ac:32:7c:1f:28:7f:b9:19:79:b5:56:7f:aa:6d:e7:18:d4:95:
fb:25:ad:22:e4:b8:20:26:c0:dd:63:f3:fb:a6:fc:a0:44:9f:
04:de:8d:79:4b:78:84:ce:f0:da:8e:46:19:21:95:74:d2:51:
99:da:ab:91:f0:e3:36:af:fb:bf:e8:69:a7:9d:e0:97:b7:59:
54:b9:48:a8:78:31:26:9a:a8:ac:d4:5e:9e:06:f7:1d:0c:10:
99:81:e4:b3:ff:9c:50:57:7a:79:91:fe:91:67:ef:9e:eb:01:
60:d0:dc:26:96:8f:e3:de:c4:d9:c8:e3:41:d8:1c:0b:a2:8d:
d3:03:a7:7e:f2:3b:ed:bf:2a:4c:72:9a:99:85:59:de:cf:ad:
57:b5:a5:82:f5:46:37:5c:9b:c5:8d:40:32:af:4b:63:ab:83:
78:3b:3c:32:29:5c:32:55:1f:4d:d5:3d:5d:61:34:a5:47:e5:
dd:3e:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:58 2024 by rpki-client on console-ams.rpki-client.org