Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
File: vFbbeW3vDb20x48kRavswVcKb9k.cer (raw, json)
Hash identifier: a3hNl0rx8TzzPvCL3MXePV/PlUO3kAcBfTuHtos05Oo=
Subject key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7014315D0C5DCDFB214174BEF1FD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.16.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:01:43:15:d0:c5:dc:df:b2:14:17:4b:ef:1f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:9b:3e:c5:ab:85:fd:c3:7b:90:24:f0:dd:
9d:2f:ce:c0:32:cd:1d:2c:87:e8:f0:29:30:08:43:
f1:7c:8f:5d:16:2f:8a:56:91:3f:0d:53:de:8b:26:
5c:99:6b:f6:2f:54:b5:80:84:c1:9e:a3:f0:81:8b:
57:51:36:94:74:d0:25:8c:d8:16:bd:a5:55:d7:96:
e5:85:18:df:6e:f0:0e:e6:3f:54:39:93:8d:cc:7e:
5e:cf:38:04:12:8c:b3:60:36:9a:ca:62:93:dc:93:
c0:5e:1c:84:c1:7e:72:a6:34:a9:06:e0:fa:31:52:
10:37:30:14:43:7d:2e:56:76:fb:4f:97:ed:30:08:
50:c0:6e:86:e2:bc:77:53:31:9a:65:f5:59:14:82:
86:f4:ef:2e:e9:a8:a7:3f:d9:bb:41:5c:e1:52:d9:
4e:c2:38:93:4d:72:ae:19:97:3c:2e:d2:37:c3:48:
7b:a1:10:11:ca:26:4a:44:8d:6a:bb:71:40:b5:31:
73:9b:0d:5d:4f:ac:84:d8:2e:1d:15:f7:e8:cf:11:
1e:10:58:38:53:2f:45:19:d4:2b:1c:8b:55:e2:cf:
16:a2:bc:88:2e:d8:12:cb:c1:e8:ba:72:91:63:f0:
13:e1:21:f5:dc:05:45:a6:47:7a:6f:0d:20:d1:2b:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.16.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f8:7e:53:a1:d9:e4:3c:89:0b:21:a2:80:bd:3c:72:85:00:
b2:08:5b:77:b4:eb:cd:fe:6f:a0:ab:b0:88:0f:28:d2:14:92:
c7:92:93:b6:eb:95:81:24:4c:28:0d:18:5f:18:28:d0:e5:d8:
f1:40:aa:60:f1:68:d8:fe:ce:40:23:c0:ae:02:e2:b0:76:7f:
e7:d1:b5:81:e9:2b:cc:5f:20:93:09:ac:84:7f:46:f1:cb:d8:
68:bb:d7:48:15:ee:38:d0:a1:2d:5d:07:a1:7c:78:ad:30:e0:
8e:94:69:d2:6e:19:99:49:e1:01:ec:00:1e:99:3c:df:d8:51:
c0:9c:14:5b:19:ab:84:3f:bb:49:b3:6a:75:e5:58:b9:9c:5c:
24:3d:f9:4f:d4:3e:3d:a3:1d:79:14:ef:1e:ba:8a:76:6e:83:
3a:23:9e:24:8f:6b:1c:3b:42:e2:d1:bf:89:e5:5b:ae:35:90:
32:1c:16:b1:34:d2:68:60:a5:de:c0:db:f4:40:f4:a4:c8:54:
c2:f0:11:59:71:28:96:d3:03:55:55:20:b6:7e:17:09:e6:fc:
03:aa:5b:e3:0a:b0:6a:e4:88:a4:32:0b:53:48:49:72:e4:b8:
24:16:a0:99:24:09:c9:d5:f7:78:14:bd:9f:61:6b:88:c6:0b:
2e:0a:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:19 2024 by rpki-client on console-fra.rpki-client.org