Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
File: vIPChDwWSbAFTJEST-4DEUCV4WM.cer (raw, json)
Hash identifier: nRBzz4uoY7MEuqpeBYeGGwNKQaGiv8UeK7aCpqYiT/A=
Subject key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8013EC1BFFE27FC6F1C19C44027287F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.240.184.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3e:c1:bf:fe:27:fc:6f:1c:19:c4:40:27:28:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc83c2843c1649b0054c91124fee03114095e163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:c8:65:39:e2:91:90:b2:ae:36:c7:1f:13:
59:38:43:c3:7d:be:3f:b1:d3:ea:7c:71:06:06:3e:
7a:9e:5d:ac:5c:6c:8e:fd:cf:c4:b4:74:cc:e2:71:
1c:78:b2:09:0f:18:96:16:a5:7c:f5:20:40:c7:34:
52:a6:da:da:e6:2d:26:a6:13:7c:ac:48:c8:60:81:
9b:4b:83:23:ba:49:83:3f:d8:5f:f0:ae:9a:f1:de:
8e:5c:70:e0:13:93:b5:d2:34:ac:89:e5:25:c2:e4:
42:db:6f:a8:c9:9b:b2:5f:5a:45:27:64:19:c2:c9:
cd:fa:92:b2:89:d3:e6:28:7f:fb:97:2c:89:a8:75:
db:00:aa:52:c3:ae:95:b2:f0:86:2a:aa:ad:05:bf:
05:50:87:0a:45:4e:30:40:75:00:a6:7a:27:12:22:
b3:72:07:e1:8d:95:38:fc:9d:94:d1:51:12:82:d9:
b6:de:f1:18:1d:68:47:93:5d:a4:65:77:52:15:50:
9e:dd:cf:17:86:c7:80:d4:30:1a:ff:29:c5:25:95:
e9:19:30:e7:c7:13:c1:61:97:9f:27:bd:2d:69:15:
7a:96:1a:1c:35:48:ca:9c:89:f0:c8:23:92:ac:b1:
22:d2:9c:9a:79:cd:14:79:e9:3c:e1:61:ab:be:56:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.184.0/22
Signature Algorithm: sha256WithRSAEncryption
33:1c:e6:e7:2e:67:25:c6:54:c9:90:93:c4:69:ae:56:63:65:
af:c5:84:4c:cf:8a:e9:bf:b2:13:30:59:61:cd:f5:49:51:43:
06:31:45:4c:9e:c3:1b:17:69:62:33:b1:62:80:ca:d6:22:21:
01:f9:43:78:78:0a:d4:39:b6:d8:0e:b4:6e:a6:d5:62:86:8b:
4f:35:5e:13:b4:70:4d:1f:93:1f:7f:9d:17:90:36:9b:2d:27:
8c:c7:e2:a8:3c:e2:6c:b7:1f:c9:35:58:54:4f:95:62:84:26:
99:6b:33:5c:fb:47:63:4d:ca:d4:ae:2f:df:6b:92:16:93:ed:
8b:7c:ee:7b:39:f1:2b:79:d7:c2:c4:c9:ba:d6:60:37:d0:a9:
53:93:29:2c:8a:bb:56:9a:9f:06:91:42:ff:31:38:e7:e1:5e:
27:ef:8f:42:c2:25:b1:36:8f:25:27:e3:fb:d6:b7:b9:e3:c9:
03:9f:ef:43:86:68:88:c6:91:97:77:0d:9b:76:7e:30:bc:e7:
c0:16:07:89:8b:ee:5a:80:b0:ca:c2:88:2c:6b:f8:dc:6b:df:
ad:dd:13:a8:cc:66:55:cf:50:aa:37:d3:65:22:24:b5:8e:0e:
b6:c4:1c:5f:a3:15:78:63:5f:8d:ad:66:29:83:0d:1c:bd:65:
df:ba:2e:15
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAT7Bv/4n/G8cGcRAJyh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzgzYzI4NDNjMTY0OWIwMDU0YzkxMTI0ZmVlMDMxMTQwOTVlMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTIZTnikZCyrjbHHxNZOEPDfb4/
sdPqfHEGBj56nl2sXGyO/c/EtHTM4nEceLIJDxiWFqV89SBAxzRSptra5i0mphN8
rEjIYIGbS4MjukmDP9hf8K6a8d6OXHDgE5O10jSsieUlwuRC22+oyZuyX1pFJ2QZ
wsnN+pKyidPmKH/7lyyJqHXbAKpSw66VsvCGKqqtBb8FUIcKRU4wQHUApnonEiKz
cgfhjZU4/J2U0VESgtm23vEYHWhHk12kZXdSFVCe3c8XhseA1DAa/ynFJZXpGTDn
xxPBYZefJ70taRV6lhocNUjKnInwyCOSrLEi0pyaec0Ueek84WGrvlYDVwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLyDwoQ8FkmwBUyREk/uAxFAleFjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2E3NTk0
Ni01N2I0LTQxZWItYjZiNS01Mjk1ZjViM2YxOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYTc1OTQ2
LTU3YjQtNDFlYi1iNmI1LTUyOTVmNWIzZjE5Yi8xL3ZJUENoRHdXU2JBRlRKRVNU
LTRERVVDVjRXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufC4MA0GCSqGSIb3DQEBCwUAA4IBAQAzHObn
LmclxlTJkJPEaa5WY2WvxYRMz4rpv7ITMFlhzfVJUUMGMUVMnsMbF2liM7FigMrW
IiEB+UN4eArUObbYDrRuptVihotPNV4TtHBNH5Mff50XkDabLSeMx+KoPOJstx/J
NVhUT5VihCaZazNc+0djTcrUri/fa5IWk+2LfO57OfEredfCxMm61mA30KlTkyks
irtWmp8GkUL/MTjn4V4n749CwiWxNo8lJ+P71re548kDn+9DhmiIxpGXdw2bdn4w
vOfAFgeJi+5agLDKwogsa/jca9+t3ROozGZVz1CqN9NlIiS1jg62xBxfoxV4Y1+N
rWYpgw0cvWXfui4V
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:34:01 2024 by rpki-client on console-ams.rpki-client.org