Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer (raw, json)
Hash identifier: +3ziNkqjGpxp3gm8oHJvPYuUpacZCCwzeyqRiwzt/oI=
Subject key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD5C500A3F1EF331AC390172D9AE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.145.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:c5:00:a3:f1:ef:33:1a:c3:90:17:2d:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:3e:61:52:1a:5d:e8:c1:fc:89:d0:6b:e9:
72:f0:3f:d0:eb:d4:53:a4:25:53:3b:cb:2c:91:02:
87:56:fe:30:42:1f:25:a4:1e:89:e6:a1:ef:04:22:
dc:f7:e0:d1:fe:4f:5a:c3:e4:b8:99:e0:42:6b:96:
fa:a3:5b:42:1f:a4:95:fe:7e:b9:82:1e:d7:8c:21:
af:10:8b:6b:96:25:f8:8c:dc:e2:97:d1:74:ac:75:
ea:4c:22:b0:23:c5:da:62:af:69:54:fb:ef:93:d0:
93:66:f0:b6:ee:aa:14:3b:2c:05:6c:12:6c:47:b9:
48:92:f5:f2:fc:32:b6:a6:9f:1b:11:fa:39:1f:c1:
d7:a6:02:e4:29:b9:7c:90:77:3b:52:8b:de:16:72:
fa:e2:31:dd:3b:22:eb:a9:01:d2:0d:40:8b:3b:84:
d1:36:e9:ae:ae:e7:4d:ba:1d:c8:a9:b5:1b:c5:cd:
2b:4d:dc:6d:45:c5:ab:e5:07:a4:73:5d:4d:bf:65:
01:76:9d:af:f2:a5:4f:a8:d0:27:b4:42:a4:79:e1:
34:20:e3:0f:b3:0a:ce:ca:c0:a2:70:bb:67:cc:c0:
ed:6e:93:75:4f:52:33:87:8e:40:70:d7:f7:f9:0f:
4f:56:a0:07:f3:0e:4b:f1:56:92:ca:f8:a3:db:a2:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.100.0/22
Signature Algorithm: sha256WithRSAEncryption
82:08:54:52:c5:e8:08:4f:a9:a8:fe:2e:de:95:71:55:a5:60:
ac:2e:28:a2:22:41:2b:ca:82:eb:df:ad:c0:58:c9:b2:17:0c:
c5:80:60:d2:9a:78:5d:f7:e9:8c:63:bc:22:01:21:00:14:dc:
16:01:3e:f6:45:b6:07:3e:4f:61:b4:91:d0:ab:a1:14:b3:81:
71:b3:1b:1c:fa:cf:5f:da:7a:80:35:c1:fa:7d:b1:25:f7:ca:
1d:cd:ab:3a:87:21:c1:74:09:f4:82:f9:b1:99:df:99:8f:a2:
f5:87:08:bd:a8:c2:b4:39:7a:b7:a3:20:9b:f7:f5:46:95:af:
7e:8f:da:17:eb:09:36:2a:8b:28:c2:c5:44:26:06:62:50:31:
2f:aa:d6:3b:72:b7:c6:fe:54:46:ac:8d:7a:6c:06:15:77:a7:
c0:b5:4d:1a:74:1a:03:0c:de:cb:08:82:e7:e1:1f:6e:3d:6a:
17:29:79:86:da:c8:2a:df:67:87:64:14:98:dc:22:a0:79:ff:
4f:7c:6b:1e:7c:7b:d7:dd:44:e3:fb:be:c3:73:6a:51:1b:f5:
cd:9c:53:7e:75:94:10:67:81:83:01:40:7c:94:26:fd:da:65:
19:08:70:c1:08:3a:b0:c1:9e:bd:ff:18:1a:c5:2e:1b:f3:41:
53:69:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:18 2025 by rpki-client