Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer
File: vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer (raw, json)
Hash identifier: dm1/D6vyju3NVizSKJtHixBv9K6ylnRMBfBJHihXOQw=
Subject key identifier: BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC36ADA4DE0E1A47643E1A2135F37C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.218.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:36:ad:a4:de:0e:1a:47:64:3e:1a:21:35:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc01bf8e98ba7b2b0e11a8e0fbc4b39a11b8673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:67:a3:4b:45:04:5a:c9:00:6a:92:f5:b7:
49:6c:f2:0d:a8:06:9b:1c:10:89:30:46:c6:ef:9c:
4b:d5:2a:af:9b:56:d1:34:0c:2e:c6:ab:81:16:b6:
fc:f4:5b:72:04:f9:f1:1b:80:84:db:7d:0d:2c:41:
4a:91:7e:75:60:9c:6a:55:69:4b:7e:a5:11:03:0c:
2a:3b:b0:1d:1d:ac:81:5b:83:e0:64:87:4b:3e:e7:
55:ea:fc:83:be:f6:a2:84:8e:15:bc:b7:3d:cc:74:
de:4a:38:aa:50:59:d0:3b:e6:0e:d6:44:b0:db:a5:
29:85:5b:ae:a0:8f:30:2d:97:23:22:d9:2b:87:ea:
bd:d0:31:7f:71:13:7f:9f:f8:0e:98:60:5f:af:95:
a8:df:6b:42:8a:77:7a:75:8e:03:c0:7e:fa:60:97:
60:cd:ec:d1:c2:f3:de:8e:ba:a7:8a:f5:bf:19:f3:
ec:2b:43:6a:98:ef:cf:44:28:40:2d:4d:b5:9f:a5:
b8:a3:48:b4:06:82:97:92:fe:27:ce:93:6a:ce:16:
29:01:23:1d:0a:5f:4d:62:dd:ce:17:0e:f0:03:5b:
f5:74:0c:1b:1d:d6:ae:58:d8:15:47:18:85:8a:e0:
5b:8b:f9:9d:6f:02:ff:6d:66:47:a4:bf:f0:23:21:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.64.0/22
Signature Algorithm: sha256WithRSAEncryption
69:f8:69:e5:8c:3d:a8:9d:3e:fa:6f:16:e6:a6:4c:a1:af:28:
62:a3:f7:36:f1:73:e9:3b:62:c4:18:e5:c8:ea:37:9f:99:c9:
88:9f:d5:51:cb:cc:03:b7:dc:f6:72:71:e3:42:a7:a3:a9:b1:
e5:ae:3d:70:a0:4f:9b:41:c8:36:fd:a0:e9:d2:de:cc:01:80:
72:d8:65:89:ce:3f:e3:60:76:8c:83:81:74:81:f7:bf:71:28:
de:a5:87:18:36:4f:03:f3:45:b7:ed:3d:8d:e3:60:83:ec:a2:
f2:59:cf:34:79:2e:8e:5a:49:ce:46:0c:ab:5c:a8:14:02:ab:
99:6e:a4:97:04:32:99:2b:e8:ed:ed:95:80:d4:1e:0e:cf:73:
b0:bb:43:2b:df:df:87:6c:30:10:cb:63:03:da:66:28:93:34:
b4:16:9c:ed:64:2c:82:13:8a:7f:8e:3e:b1:54:f0:0b:99:77:
27:f4:6e:ed:12:08:96:27:da:2c:65:54:d4:70:87:10:35:4f:
bf:dc:7a:b5:0d:5f:9f:0b:91:d0:14:0f:72:66:d0:9b:65:37:
93:89:84:c4:a6:75:d9:c7:35:df:65:68:41:8b:4d:ed:ab:07:
86:34:39:82:49:8a:2f:6a:09:54:40:1c:36:ef:fe:80:ac:68:
5d:1c:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:05 2024 by rpki-client on console-ams.rpki-client.org