Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.cer (raw, json)
Hash identifier: 6B8hAkc0dCGoOYX4zVaonKL2vlKeVQKKJNe2ZJzOdk0=
Subject key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067BFFEFBA1E88CEFD2048F8B890863
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213904
IP: 2a0b:bb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bf:fe:fb:a1:e8:8c:ef:d2:04:8f:8b:89:08:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:f7:95:90:e3:5b:ee:40:dc:6b:1c:b5:64:
4e:5b:8a:5b:2b:31:2c:15:5c:f9:58:23:d7:98:14:
3d:60:26:da:eb:82:a8:8c:c7:3b:a3:f1:42:f2:ef:
d1:55:e1:c6:34:d8:b2:b5:6d:28:8c:ec:8e:98:ac:
8a:41:86:9f:da:2e:e8:82:85:d4:97:8e:70:e3:37:
55:2f:cf:71:9e:1b:ae:6a:87:cb:45:dd:c5:bb:de:
62:fc:24:be:f1:a0:65:39:d7:6d:71:13:3d:92:c2:
47:b1:89:58:9f:2d:3c:cd:f5:5c:86:60:39:10:d8:
be:2a:43:ad:64:82:9a:0d:70:2a:bc:03:e3:59:84:
0c:8f:de:b3:16:f2:93:28:0f:0d:ba:ef:e8:39:a1:
b8:c5:f5:ab:56:b2:7b:97:1e:a0:63:ce:0a:b9:e8:
06:e1:95:e0:56:4c:cc:d4:e4:a7:74:ee:a0:f3:6d:
44:ce:1d:02:12:dd:75:d0:a7:95:a0:94:9a:f1:80:
ec:9e:29:a6:a5:d9:8a:60:08:c2:6b:39:01:ce:30:
01:56:52:72:6b:42:a8:59:30:6b:96:5d:5c:08:d9:
58:32:12:b6:68:34:33:3e:74:e6:f7:5a:f7:01:7a:
c0:1a:c2:32:ba:5b:e1:b3:5a:2a:bc:a6:aa:61:66:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:bb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213904
Signature Algorithm: sha256WithRSAEncryption
84:1b:99:06:bd:8b:8b:f3:4f:f6:32:5b:fa:7c:07:45:a7:ab:
08:d0:04:75:77:69:61:9f:e7:f7:62:3d:eb:40:50:68:2c:9e:
de:5c:c4:5c:b7:0a:70:ef:f9:95:11:44:2f:04:df:5e:c7:9b:
39:57:82:4d:d2:05:08:7f:50:c7:1c:1c:d5:88:58:d3:31:e9:
2f:a2:36:fa:dd:30:ac:a3:cb:9d:72:67:9b:59:47:88:76:70:
ec:b5:36:a9:47:45:34:98:b1:37:51:c0:6d:ee:c2:a1:0d:46:
aa:3a:0e:26:3d:6c:ca:10:38:f9:03:4b:cd:fd:6a:40:23:90:
9b:a0:5a:77:4b:78:2d:56:5e:cb:10:84:96:82:ab:66:60:2d:
b4:b7:d9:42:ab:64:66:fb:b2:49:c0:d2:3b:fc:82:0f:ca:b5:
93:8e:26:4d:3e:16:41:00:33:e3:62:d2:a8:a4:77:e1:2f:01:
95:e9:19:29:df:65:98:a9:02:1c:ca:7f:01:7d:28:06:0b:93:
72:15:26:a4:5b:ba:b8:2e:b1:d5:3f:ad:0e:80:30:23:45:09:
e8:30:34:4c:16:bb:3c:a5:fd:0b:aa:b0:ea:62:f8:5e:14:f0:
c2:c9:4e:2d:d0:5f:04:d1:77:78:a1:f0:6f:96:60:4c:62:89:
3b:52:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:53 2025 by rpki-client