Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.cer (raw, json)
Hash identifier: E4cOv3CkTGsvsWZbztwVzxJ/XHSDLHLr+hX8uNnRO30=
Subject key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794A7F575C345335AFD1E4BEAFC9E30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203411
IP: 185.135.144.0/22
IP: 2a06:f540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a7:f5:75:c3:45:33:5a:fd:1e:4b:ea:fc:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:34:8d:40:ab:f4:b0:02:09:c7:0f:f2:6f:
78:71:4c:d2:47:ff:d9:c6:17:c1:f1:46:bd:81:df:
9c:03:58:8d:17:da:5e:17:7d:fe:f6:a7:ab:dc:d1:
87:e2:25:8a:bf:dd:a8:06:4b:60:1f:79:91:79:77:
fb:3e:3f:36:11:2a:77:2a:b0:07:68:73:d6:35:3f:
8a:7b:b1:4b:ee:26:c3:ca:4b:55:96:f1:6b:45:ac:
7c:33:a9:86:e8:60:3e:d1:c0:3b:b5:49:3b:be:88:
f2:70:21:cf:af:67:ae:58:ce:0b:ff:67:9c:1e:05:
9f:0c:7b:f2:ab:e3:af:e9:d6:7e:13:91:9f:f6:18:
db:02:89:64:ae:7b:86:bb:36:09:fd:38:0c:4d:85:
e2:f3:4b:90:bd:88:36:90:0a:cf:c3:58:a8:6c:55:
2c:e7:92:fe:7e:0f:04:5e:d0:be:20:c1:d6:c8:db:
bd:e6:95:72:ec:d6:1c:77:16:22:6d:23:a0:3b:ad:
e1:58:65:10:f2:8b:03:0b:95:bf:6f:dc:cb:25:ed:
b2:01:e9:65:73:1d:b8:e4:63:6d:f1:06:01:13:8c:
cd:9d:21:3c:9e:b3:09:1a:1d:90:b8:31:06:cf:c8:
ea:78:33:03:a2:a7:b0:72:4e:bd:a0:c7:20:7a:58:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.144.0/22
IPv6:
2a06:f540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203411
Signature Algorithm: sha256WithRSAEncryption
79:05:e2:be:3d:b2:0a:21:17:68:69:db:5c:b5:b2:44:63:a7:
5c:65:0d:3b:da:74:43:dd:9f:1a:fd:35:94:90:ba:10:62:5b:
14:1c:da:02:2a:4d:22:b3:17:bf:af:68:e7:53:8f:bc:13:2c:
a2:f8:ef:e5:cc:0d:dd:6e:e3:dd:a3:ac:3b:a6:c6:11:c7:63:
b2:88:1b:63:77:25:35:25:a7:c1:03:6e:9d:ba:d1:47:15:d5:
e3:0e:e4:16:c5:66:62:7e:a8:11:a1:48:56:3c:55:f2:d1:1f:
00:7e:bd:9b:e4:3b:a5:de:80:38:ba:66:98:15:85:ad:56:5d:
ae:d1:f4:69:36:08:77:70:8e:75:d4:c8:a1:5d:e8:2a:a1:81:
b2:c0:48:2e:83:78:9b:4f:25:9d:e3:ca:27:96:a0:e1:fe:2a:
f3:77:55:75:c0:6a:3e:9b:d7:bc:f9:be:2c:8b:3b:71:8e:ba:
c3:46:4f:c5:66:28:30:35:57:12:9e:e8:cd:69:b2:f4:16:a0:
33:e6:f1:33:8a:59:2e:d2:e4:34:97:0e:47:49:7a:a5:c3:55:
48:f5:bf:7f:7d:03:86:ac:30:01:21:8a:70:19:65:b0:66:a8:
13:4d:83:44:c7:7a:70:12:8c:0d:03:e3:13:47:8e:0a:2b:49:
62:8a:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:18:19 2024 by rpki-client on console-ams.rpki-client.org