Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer (raw, json)
Hash identifier: Y86Zdsyci+WGfNciRcRzMbRFzJqzP9dIcNwAheXvSX8=
Subject key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EE29401B3460E719DC53B75FBEF7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16356
IP: 217.144.32.0/20
IP: 2a02:2a10::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e2:94:01:b3:46:0e:71:9d:c5:3b:75:fb:ef:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc75052b50256ba562904e6f134350d3e75ded58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:c6:aa:c2:4f:3b:d6:c3:43:d6:fb:aa:e0:
49:f8:71:a4:3f:2e:ca:c7:57:52:3f:a7:68:40:2d:
56:69:9f:c8:d6:5c:11:d5:b1:ef:24:dd:13:73:aa:
db:0d:ee:2b:1c:72:a8:11:99:9e:09:a9:f4:1d:59:
f4:a3:dd:f5:0e:2c:9f:b7:d3:56:c2:7e:47:c0:77:
42:e8:64:18:11:bd:99:90:19:89:ac:fc:f0:82:70:
42:14:eb:47:10:b3:c9:c0:d6:51:4a:13:45:88:56:
76:14:98:90:5e:07:c3:b5:f3:4e:37:68:91:ba:ae:
f4:16:a7:7e:23:59:72:f0:fb:0f:1b:3c:14:42:d4:
17:2a:95:bf:c8:d3:28:5b:54:ef:85:5b:4b:9c:91:
0a:ba:07:dd:a4:f1:e1:b0:84:1e:55:e9:6e:06:01:
af:fe:45:cf:b7:7e:ac:c0:12:6e:ad:9d:bf:d9:9b:
88:02:e2:b8:c1:b7:de:e8:04:5a:b7:7e:5e:8c:8d:
f2:b8:59:97:bc:72:67:af:e3:0a:8c:04:24:48:11:
58:21:40:9c:a0:f5:04:46:41:bc:3e:61:60:f5:84:
10:22:29:1e:73:64:22:75:10:bf:a0:43:54:f3:e4:
fd:b7:8d:93:68:0b:47:cd:28:75:0e:dc:50:4e:c0:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.32.0/20
IPv6:
2a02:2a10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16356
Signature Algorithm: sha256WithRSAEncryption
24:bc:a7:4c:94:6d:17:04:aa:c4:0a:08:f2:fd:9f:bb:6b:a5:
e1:5f:ea:d7:06:45:b6:41:0c:f7:d6:02:77:1c:73:59:37:f5:
1c:14:d5:ef:ea:b9:c2:5c:09:af:13:a1:10:22:18:77:f6:c2:
56:d1:77:79:cb:05:53:6a:bf:af:e2:b1:63:8f:57:ad:39:8a:
e3:51:06:37:80:c1:0d:b2:87:64:d7:b3:d8:4a:f8:35:78:57:
12:49:bd:50:22:c9:69:55:70:8b:9b:e3:8d:69:0b:c0:ba:54:
68:d3:59:41:2b:19:e3:78:25:32:34:65:e5:94:f0:f5:eb:a2:
8c:7e:6b:6d:5c:67:dd:94:0f:6c:84:ea:cb:26:8f:0b:54:42:
e5:cd:81:56:05:54:af:c3:90:74:78:1b:13:8e:6c:11:19:42:
99:0f:75:23:4f:2a:2b:52:36:44:8d:05:63:3a:44:7c:1e:66:
f6:71:45:45:36:66:1d:55:69:f7:50:2f:76:72:f3:c5:f5:f1:
c5:8a:2a:74:4a:c3:4b:a4:7b:c6:33:7b:ed:26:00:01:e0:f6:
3a:7f:ad:e6:e2:c7:36:d7:5f:5a:b6:00:f7:82:24:f4:6d:3a:
31:bf:e6:35:f8:bd:b0:15:19:6d:1b:56:af:11:93:66:7e:93:
02:81:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:04:48 2024 by rpki-client on console-fra.rpki-client.org