Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
File: vHBHR5L1CD5iXyTW1XqrctZXIp4.cer (raw, json)
Hash identifier: SG0W6k0y/cgDQezTycPPBX82Nx2yVE749PEWdfW6ovY=
Subject key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42518EE702FB55092D26D4A116E59B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205158
IP: 194.56.182.0/24
IP: 2a11:3a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:18:ee:70:2f:b5:50:92:d2:6d:4a:11:6e:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc70474792f5083e625f24d6d57aab72d657229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:14:35:78:1e:0a:40:e0:51:54:89:f5:fe:
da:85:d3:89:a4:88:34:e4:58:f7:f8:4a:e8:f9:52:
0c:0e:73:ce:33:ec:0b:3e:22:a0:ce:07:17:1a:e7:
11:da:24:f4:a8:60:dc:bf:ce:5d:22:fa:bc:c0:2f:
5c:10:9a:32:4f:b7:0a:58:67:d5:c8:4e:1d:6a:e3:
30:d6:7a:e9:42:84:5e:0a:6d:44:cc:ea:ed:84:73:
6c:3d:6c:69:64:ae:8d:05:b5:1f:19:28:70:f2:44:
6a:d3:f7:36:01:ca:f1:0d:08:5e:47:ce:47:ec:db:
e2:76:9f:72:e0:75:46:61:45:80:31:db:22:ec:0b:
03:2e:f1:16:33:da:30:e1:30:be:9a:6e:d2:bb:09:
37:69:3d:26:4a:97:65:86:87:ae:32:e4:dc:72:a1:
de:e9:cd:cf:5e:13:78:a0:08:5d:98:0c:c3:eb:d7:
7a:50:72:dc:c8:a4:81:9c:43:51:f3:7f:7f:e3:41:
d0:cc:1a:33:2c:01:a4:56:2d:c9:75:28:c8:2d:52:
44:a1:26:35:e4:06:45:9b:cc:96:ea:bf:df:9e:ab:
53:f5:3c:69:3d:fe:a1:f1:9c:9f:1e:cd:66:da:a9:
ab:e3:fd:60:56:f9:12:6f:4b:1e:b8:12:fb:1d:c9:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.182.0/24
IPv6:
2a11:3a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205158
Signature Algorithm: sha256WithRSAEncryption
7e:25:8c:c0:6c:d7:ee:95:fe:93:f4:0f:ab:a7:4a:f5:08:b0:
2b:92:0e:84:6e:8a:b2:88:59:7d:da:06:c6:38:ff:73:10:3c:
1d:d7:62:b6:eb:34:79:55:58:77:bb:21:39:d7:91:01:e4:02:
28:66:b6:82:de:c7:5f:02:7b:80:9c:5d:64:09:69:5e:07:b5:
34:c7:64:75:a1:15:83:c3:dd:bb:5c:41:b4:e2:d3:f3:99:fe:
a6:f6:f0:28:b1:9d:01:11:0e:3a:3b:cd:29:13:8a:fa:4a:32:
d6:96:95:89:7f:43:9c:eb:0a:7c:1e:62:02:8f:1f:11:4e:c7:
f2:f5:6e:aa:49:b6:d3:5c:39:ce:1e:05:1b:1b:40:10:b3:c1:
dc:80:5f:4f:48:bf:c8:f3:50:59:1a:bb:48:06:e5:29:c5:36:
a5:a2:06:d4:55:bc:34:16:69:d9:26:76:45:83:64:4f:44:4d:
24:c4:3c:97:cb:01:e3:75:2a:b1:5f:9b:eb:4e:bc:95:54:05:
97:fa:ce:9d:82:ad:2d:30:6e:a9:85:93:a5:30:89:cb:be:f5:
8c:76:c8:c1:70:32:93:d0:85:e8:81:23:4b:27:2f:44:cb:9d:
55:58:20:4f:f9:ef:1d:37:fa:7a:3d:9d:c6:17:96:27:ef:5f:
7b:21:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:38:38 2024 by rpki-client on console-ams.rpki-client.org