Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer (raw, json)
Hash identifier: 1EKMDdgwGsIjmRH2QdESpBgIXgvIljeqJbu5Clyp6F4=
Subject key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE862E646C2E1EFB032CD988EF6F61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2dc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:86:2e:64:6c:2e:1e:fb:03:2c:d9:88:ef:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:b5:83:e2:2e:65:d4:c7:89:a0:c8:18:02:
0d:80:eb:33:3b:ad:6c:34:f0:40:72:37:ed:5a:dc:
e9:2a:2d:9c:4a:38:41:9c:f5:a3:72:a8:62:53:57:
85:01:84:f5:c3:3c:92:43:5e:f1:66:07:e4:b3:96:
2e:27:9e:fc:ce:fd:16:7b:de:03:25:44:7c:cc:94:
a5:db:22:26:00:26:e0:a5:02:86:56:04:4c:3e:ad:
cb:e9:3e:75:d3:4a:f5:b9:8e:21:00:cf:9d:88:b1:
47:42:65:b4:fc:7d:73:96:97:62:dc:9a:63:1a:03:
77:4f:1d:39:b2:41:f1:b8:57:af:12:d4:21:d8:a3:
7d:1b:05:76:19:06:ba:d5:9e:5f:dd:5d:dd:0c:c3:
f0:85:b3:75:65:ac:a5:f2:da:58:26:5a:78:70:34:
b6:bd:d1:a0:fc:6d:43:94:23:5c:d1:a2:e3:a2:0c:
3c:30:40:27:f0:a7:1d:05:6d:a2:23:4c:4b:17:c5:
6b:e8:b2:b9:43:ac:7e:f5:fd:1b:41:9b:d5:4d:82:
6d:e1:22:31:bf:97:51:5c:9c:40:de:53:a3:64:40:
4c:00:d2:a0:5f:fc:fa:35:ae:60:c2:56:1e:ed:df:
39:b0:bb:30:48:8d:73:87:85:13:9c:b7:92:66:b4:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
54:63:50:ee:d9:76:fd:f1:56:5f:e4:36:7c:1c:3a:75:8e:22:
8b:bb:35:0f:07:6a:ee:93:02:fc:b0:3d:40:36:dc:10:78:ba:
3f:b4:ac:5b:0b:7f:22:c5:49:05:ad:b9:01:66:11:6c:29:f1:
87:ec:b1:e7:be:ea:0e:0f:4d:a4:dc:35:aa:7d:58:ce:3f:4a:
3e:9d:e5:c5:4f:32:a8:9a:2c:ca:c5:07:30:66:2d:b9:bf:ff:
4e:36:0f:f9:1c:4a:58:cb:12:f9:49:93:47:f5:27:ec:b1:4c:
16:72:6d:e6:09:81:c1:50:ed:a0:b6:42:06:03:5e:24:34:4d:
be:44:d0:cc:38:c5:09:0e:53:04:db:3e:b4:34:c5:bd:22:00:
30:17:12:4d:8d:69:39:28:0d:4e:ec:77:db:a9:e5:1b:02:e0:
c9:f0:67:90:11:c5:a1:29:59:49:ea:e6:78:f4:ca:72:5d:e5:
82:f2:1b:93:59:fc:30:09:e7:cd:0c:a6:db:db:9b:3f:dd:74:
cd:28:a1:be:cc:30:25:14:37:f0:05:a5:6a:ca:b0:bd:82:bf:
f8:72:ac:cb:8f:0c:ec:8d:e1:8e:b0:86:e5:7e:0e:47:a2:cd:
1d:2c:f9:7a:5b:49:c6:73:08:f4:07:97:d2:1a:24:6b:de:67:
06:dc:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:31:55 2024 by rpki-client on console-ams.rpki-client.org