Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
File: vGY2Z5cyOLGE2e79NrvzgQukttk.cer (raw, json)
Hash identifier: npAb7bpNgCGZUvGPDLOXxBQ5y6vicRCtYuVzlErDuEQ=
Subject key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726951406E82F9B9C66B5A4AB6FBB1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198608
IP: 5.57.48.0/21
IP: 185.168.244.0/22
IP: 2a01:4c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:95:14:06:e8:2f:9b:9c:66:b5:a4:ab:6f:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:6e:42:d3:af:d3:de:75:60:75:37:56:2f:
8d:dd:27:bd:c5:50:b1:de:25:69:f5:68:37:28:e7:
2d:17:50:fc:9e:2b:9b:57:a3:e1:85:c4:eb:d8:9d:
c7:36:18:c3:40:42:74:cb:e6:18:3c:ce:a5:b7:c5:
14:1c:16:12:ae:15:a1:77:49:ab:17:5d:28:7b:2f:
e3:7e:60:84:d3:cd:1b:1b:6b:cf:5d:c7:cb:3b:82:
41:7f:1a:f5:32:77:52:7c:64:1a:9e:f8:e3:94:e3:
c7:21:50:17:71:24:16:73:88:62:37:11:96:1b:c4:
8d:ce:71:ee:73:5f:89:d8:56:f0:13:d8:24:aa:2b:
0c:d4:80:e6:e0:5f:f5:cd:22:44:36:35:49:30:4d:
b5:a6:24:33:e3:81:60:b0:a0:b8:6c:e4:5f:5f:9c:
2c:a6:10:ab:fb:74:01:0b:37:9e:7d:7b:b7:5e:01:
e5:e3:2e:eb:d4:87:93:64:c8:68:01:2f:22:bb:df:
1e:c3:21:d7:e7:ce:df:61:fc:e9:b7:b6:b0:c5:32:
b1:9c:d4:4b:4c:67:aa:5c:25:b9:43:b3:86:7c:9e:
52:ac:b5:e3:6b:1d:ca:ec:29:a8:eb:f8:ad:07:2c:
d7:3e:d1:2a:6c:1c:45:89:c9:49:e5:e0:fd:09:72:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.48.0/21
185.168.244.0/22
IPv6:
2a01:4c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198608
Signature Algorithm: sha256WithRSAEncryption
04:f2:b6:10:34:fd:5a:f7:19:73:bd:af:6d:97:e0:89:80:f0:
b6:df:28:4a:35:75:5c:51:0d:a5:7d:77:7a:a0:db:ee:bc:75:
5b:01:03:87:76:ba:4f:d0:5c:c8:85:84:76:5a:46:57:c7:14:
b3:cb:57:36:f7:8e:b5:d1:a1:25:35:f2:b2:3a:e5:c7:06:e1:
0a:02:20:7f:bc:3c:6b:43:3b:8f:fe:36:52:ac:cd:24:fb:5b:
e8:b1:7a:d5:41:9d:22:ef:c8:1c:2c:43:3b:5c:5c:f4:f2:39:
96:df:fd:34:bb:66:56:7a:a5:a5:36:f4:77:d2:4f:f8:3d:25:
bd:6f:09:d9:3f:4c:9b:0b:1c:1e:47:05:b1:2c:82:42:48:f7:
98:94:4d:b1:7e:8a:2c:df:15:92:be:59:18:08:d4:ff:98:40:
63:45:a7:3b:8b:4d:db:66:c7:6e:ba:ed:20:dc:b4:ab:d4:51:
a4:48:c8:f5:e8:78:24:29:a9:7e:8c:1c:b8:f6:4f:98:52:3d:
2a:72:4a:d0:f9:2f:16:d1:b4:b5:84:fe:6f:6a:8c:ef:a8:28:
df:76:62:22:66:30:b2:f5:12:59:26:0a:4c:12:69:5b:d9:13:
68:ff:2d:2e:cd:6e:7c:b6:57:26:20:7d:68:40:9b:c5:26:69:
4a:e7:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:11 2024 by rpki-client on console-fra.rpki-client.org