Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
File: vMfmdGZUQPbmuA5v8VWq1qics_I.cer (raw, json)
Hash identifier: MoO7Sb3vYp3k8Jsv8mLF5zCa/UiM5gT9jgN/PV8v0no=
Subject key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2BB1F0A7E3588FBC5DED789B3A1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.13.85.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2b:b1:f0:a7:e3:58:8f:bc:5d:ed:78:9b:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:83:40:18:00:e7:dd:6d:e2:fb:41:0d:41:
ff:65:9c:c7:39:63:a4:61:22:a1:82:1b:31:88:29:
65:bf:d0:ab:0a:17:f4:94:af:93:f5:e3:79:f1:32:
26:49:0c:f6:7e:bc:47:c0:da:eb:c1:c5:cd:81:99:
c3:4c:81:fe:16:08:77:f6:ef:43:ab:8d:64:3c:69:
cb:02:26:be:6b:19:7f:ac:be:69:e7:1e:b3:58:3d:
4b:d1:32:a0:0b:62:48:b5:cc:25:5a:35:95:a9:a7:
4f:25:c0:cd:06:67:8b:a8:50:9c:ae:16:40:7d:9b:
b3:f2:07:c3:c2:b5:65:c4:05:84:b2:0b:a8:83:94:
c7:55:a8:8a:99:1c:ef:fa:a6:87:3b:72:01:ab:73:
47:21:5f:53:42:cd:44:07:2a:67:ac:7e:fa:2e:1f:
c0:41:80:09:99:0b:84:24:24:38:b8:ee:8a:c6:ff:
01:34:18:51:f6:de:53:d9:79:30:09:bf:c6:9c:d1:
82:fb:e5:9c:ba:1d:69:db:a4:56:8d:e2:4a:1f:e2:
c0:83:84:d1:cf:f2:3e:85:ac:2e:87:bf:da:1d:fa:
89:e7:f5:56:ce:79:87:cc:92:b6:1b:85:44:31:3f:
dc:f3:f7:ea:2f:b1:f8:1f:f9:e4:b1:6f:ac:86:ed:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:69:fd:04:63:8e:c4:bd:b9:84:c5:12:73:51:77:11:39:00:
de:21:39:a6:6e:60:ef:be:5b:32:4f:86:fb:aa:4f:7a:5f:ff:
27:f1:74:c9:75:cf:09:7a:c1:af:c7:68:81:96:7d:e7:a0:02:
10:1f:f6:d9:aa:17:4a:67:c2:d5:7d:1b:37:14:b2:48:3a:c6:
7b:09:73:10:9b:8b:58:6f:e1:02:7b:b3:fb:14:95:94:d5:43:
be:c2:36:85:2a:2c:58:29:e5:3f:36:3f:3b:68:75:ce:35:8b:
28:ab:35:f4:6c:24:98:73:9d:16:41:31:12:63:45:5b:01:4d:
19:44:dd:2a:54:5b:b0:f9:e0:db:c8:c7:b3:73:95:62:49:d5:
a1:1a:cb:10:ab:be:65:13:93:f7:a6:a3:81:3c:23:ec:f3:0a:
d3:a7:18:61:70:b3:e6:d6:60:a6:94:16:45:36:48:81:81:d2:
02:90:da:b8:57:4a:d5:0f:d8:d7:ec:a9:a6:80:e5:54:43:3b:
d5:67:0a:9e:9a:01:8e:44:22:24:e8:c4:fa:7a:06:f3:43:fe:
2d:ef:9a:b4:ed:bb:f6:e1:8b:40:7b:e3:c0:45:29:a3:80:55:
c3:75:bc:4f:98:3c:8e:d1:78:5a:80:03:2b:6b:b0:ac:c6:68:
40:ef:f0:65
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF3Cux8KfjWI+8Xe14mzobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2M3ZTY3NDY2NTQ0MGY2ZTZiODBlNmZmMTU1YWFkNmE4OWNiM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmaDQBgA591t4vtBDUH/ZZzHOWOk
YSKhghsxiCllv9CrChf0lK+T9eN58TImSQz2frxHwNrrwcXNgZnDTIH+Fgh39u9D
q41kPGnLAia+axl/rL5p5x6zWD1L0TKgC2JItcwlWjWVqadPJcDNBmeLqFCcrhZA
fZuz8gfDwrVlxAWEsguog5THVaiKmRzv+qaHO3IBq3NHIV9TQs1EBypnrH76Lh/A
QYAJmQuEJCQ4uO6Kxv8BNBhR9t5T2XkwCb/GnNGC++Wcuh1p26RWjeJKH+LAg4TR
z/I+hawuh7/aHfqJ5/VWznmHzJK2G4VEMT/c8/fqL7H4H/nksW+shu2v9wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLzH5nRmVED25rgOb/FVqtaonLPyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzA4YmI5
Mi02ZjAwLTRlNWMtOTI0YS1lZjZjY2UxNDVkODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMDhiYjky
LTZmMDAtNGU1Yy05MjRhLWVmNmNjZTE0NWQ4Mi8xL3ZNZm1kR1pVUVBibXVBNXY4
VldxMXFpY3NfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuQ1VMA0GCSqGSIb3DQEBCwUAA4IBAQCLaf0E
Y47EvbmExRJzUXcROQDeITmmbmDvvlsyT4b7qk96X/8n8XTJdc8JesGvx2iBln3n
oAIQH/bZqhdKZ8LVfRs3FLJIOsZ7CXMQm4tYb+ECe7P7FJWU1UO+wjaFKixYKeU/
Nj87aHXONYsoqzX0bCSYc50WQTESY0VbAU0ZRN0qVFuw+eDbyMezc5ViSdWhGssQ
q75lE5P3pqOBPCPs8wrTpxhhcLPm1mCmlBZFNkiBgdICkNq4V0rVD9jX7KmmgOVU
QzvVZwqemgGORCIk6MT6egbzQ/4t75q07bv24YtAe+PARSmjgFXDdbxPmDyO0Xha
gAMra7CsxmhA7/Bl
-----END CERTIFICATE-----
Generated at Fri May 3 07:33:53 2024 by rpki-client on console-ams.rpki-client.org