Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
File: vBwW9b43_2xdQgXyq6JfzjWJAzU.cer (raw, json)
Hash identifier: 5tIS4ihMauW5s8NitnDGYn3agNfT1VAR1LN5iaSc40s=
Subject key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B584BB99F8F8AA944BC32EE8854A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.32.54.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:58:4b:b9:9f:8f:8a:a9:44:bc:32:ee:88:54:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:ca:21:9d:4d:17:4c:ca:f8:5b:86:c0:a2:
07:fd:b6:a7:dc:97:9f:ff:92:a6:0f:49:2a:9e:0f:
b3:8f:53:bb:fe:4a:bf:ee:b1:1f:42:18:dd:00:6d:
93:ba:16:fb:f2:bb:e8:84:86:ed:91:d2:be:74:ea:
cd:93:ec:9f:03:97:6d:7f:7e:7b:06:73:b9:bf:d7:
8c:72:cc:36:d9:bf:86:7f:23:29:d5:d1:e5:20:0d:
bc:5d:2a:c1:d1:18:9f:e7:be:52:60:0b:b4:74:25:
fc:d4:0d:5f:f4:60:2e:41:5e:33:20:28:c6:14:12:
bf:5e:bc:41:21:31:73:23:ec:26:8d:c8:4c:ce:86:
d0:b7:ee:65:fd:bf:05:b5:23:ce:20:33:7a:d3:0f:
c1:0d:a1:71:68:1d:13:4f:2a:ba:23:78:8b:97:0d:
fd:eb:ef:f8:1d:a4:88:48:23:52:6c:4d:b6:11:22:
75:bc:0e:af:f9:57:3c:a1:c0:5c:df:5a:a7:12:ea:
b0:ba:3a:38:9d:1e:60:0a:f4:b9:99:69:cd:d8:ee:
64:3a:7e:1b:5e:de:d1:78:7d:11:c0:7d:7b:01:83:
ca:52:22:45:3d:30:cd:c4:99:f5:90:33:6a:9d:13:
0a:9a:36:0f:ab:a3:1c:bc:5e:f8:ac:fb:85:b4:02:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b1:e8:16:59:f9:8d:9e:08:1a:a0:65:69:8a:1c:bf:5f:59:
c8:60:21:2b:ac:19:6f:12:ce:c5:12:99:7d:d5:0e:b3:2e:fc:
ab:1e:b5:c4:59:3c:15:ee:70:0b:cf:ae:2b:2d:20:21:b5:c5:
6a:b5:b0:44:5f:5e:3f:f2:da:f7:17:80:82:51:03:62:58:e1:
6c:3b:05:02:bf:1e:c1:04:94:a5:16:1c:46:c0:58:72:6d:af:
48:ed:3b:9b:8f:45:ca:c7:c9:ca:6f:0e:10:63:e8:56:42:cc:
3a:46:fb:f4:b2:0a:af:59:44:71:ce:69:86:a7:c8:b6:be:41:
ee:7c:01:5b:0c:bb:39:e3:c6:2a:32:d0:d5:00:50:64:48:9b:
82:24:7d:c4:34:b1:69:fa:b8:98:7d:cf:e4:d2:08:14:fc:11:
5e:91:a5:f3:cb:74:38:7f:dd:72:08:c8:ed:c4:45:20:e4:ff:
06:b9:25:f8:a5:5b:57:a4:f6:b0:3d:a7:3d:82:b4:fd:da:f5:
3d:ce:04:e9:8f:0c:c5:58:98:a0:7c:ac:b9:93:a6:66:82:bb:
f5:14:8a:97:df:4d:cc:16:45:86:7d:17:6a:cf:f4:05:6a:80:
1a:c8:12:8c:c0:6d:20:b5:24:95:ed:ee:a6:08:73:9b:c1:83:
2b:0f:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:58 2024 by rpki-client on console-ams.rpki-client.org