Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.cer (raw, json)
Hash identifier: OiObWcQ4ZqzEVAZWIuazWcViZossB57KBT82BPmB5Pw=
Subject key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF5D6979B2C39B57EFF8CBA0BD99C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.57.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f5:d6:97:9b:2c:39:b5:7e:ff:8c:ba:0b:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:21:c8:f2:29:d0:b4:b9:11:71:6b:2f:18:
2a:29:ce:2d:21:fa:d5:16:65:68:af:67:06:55:cf:
03:f8:d4:2c:35:59:8a:ea:7f:20:a3:33:97:71:73:
fd:4b:f9:56:8e:de:3c:db:88:57:c1:6e:cf:ae:ea:
e9:88:f9:49:68:d1:94:bd:ed:20:08:00:48:c7:8e:
fb:db:cc:d1:62:3c:2c:6b:a1:b8:e8:50:4b:b7:11:
08:24:5a:b4:96:67:5b:45:20:3b:1e:29:d7:2d:99:
75:ee:e6:05:f6:49:d9:1c:24:e8:19:30:c7:b5:14:
e4:ae:1a:bb:24:26:05:ca:6f:3a:d1:27:a0:83:be:
76:dd:77:ff:2b:35:11:de:4b:d8:e8:5a:53:ae:27:
50:25:03:02:08:3f:87:2d:75:0b:02:57:6b:00:38:
8a:e6:27:1d:a0:bd:c3:60:d0:90:53:ee:08:13:46:
7d:31:f5:58:f8:21:49:95:4c:e3:28:49:de:e4:65:
80:c1:9a:51:aa:68:22:c7:67:2f:85:af:9d:cf:db:
5b:40:cd:07:2e:e0:90:5b:80:22:ce:0a:7f:5e:68:
c7:35:2c:6b:53:e2:c1:bd:e6:ec:24:02:33:eb:44:
55:26:7f:27:be:c2:3b:b6:84:aa:07:9d:08:4c:ce:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:88:90:c3:93:d3:f9:43:4d:ee:af:fc:a2:f3:5f:1e:e9:bb:
3e:d1:91:5b:5e:33:1d:d9:8e:6c:7f:b7:ca:1a:ea:e8:40:fb:
18:26:b4:b8:f7:46:f3:2f:70:07:30:b8:41:e8:78:9e:98:e4:
de:97:8d:0c:b5:05:45:93:c0:4c:77:32:5e:f8:85:27:81:a3:
09:1b:02:8e:fa:89:c5:05:a0:1a:61:d1:56:95:8e:0d:82:e4:
f1:57:f6:a5:9f:c5:a8:17:37:5d:48:57:2d:aa:4d:e6:6b:85:
17:af:05:06:01:6b:6f:fe:f2:dd:f2:12:f2:80:c9:5b:af:ac:
b5:83:7f:5b:93:b9:f5:e8:bd:80:6b:af:db:dd:c0:b2:4c:4d:
8a:2c:e2:38:28:fd:1a:20:78:0f:57:78:c9:ca:ba:6a:fe:17:
98:89:f3:52:e8:a4:6d:d4:24:6b:bb:2d:d6:42:06:3b:6a:22:
77:17:e8:0d:99:96:5a:e6:e7:f5:66:7b:64:a1:82:8d:5e:30:
de:92:87:63:34:12:d3:b9:99:42:58:a1:a8:5a:2a:a8:2b:1c:
cf:60:51:4e:53:02:be:b8:10:f1:67:85:ba:e8:3e:5d:dd:e6:
d8:7b:34:86:e3:85:18:f5:52:39:ed:d6:8d:6c:19:ce:a2:da:
3d:9d:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:06:43 2024 by rpki-client on console-ams.rpki-client.org