Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer (raw, json)
Hash identifier: BoX6WaUV+dsiZpMmCffnkZZbEsADbLp9pPphEnK5AUI=
Subject key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4245C151EEDB00C268D358D13789D48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.109.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5c:15:1e:ed:b0:0c:26:8d:35:8d:13:78:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:79:b8:d6:97:17:82:28:73:d8:60:7a:9a:
a2:58:7a:c5:84:e4:02:4a:d1:5c:85:d0:5d:20:24:
a5:dc:0e:0a:58:51:31:70:32:5e:44:07:11:1a:f2:
4f:2a:06:c9:64:65:da:bf:d9:b4:56:bd:57:56:aa:
a9:66:ab:1e:4c:87:f3:a3:0b:23:18:57:03:03:6d:
db:8d:41:35:9f:e0:14:cb:40:dc:bd:33:ae:e6:17:
b6:18:1e:dc:59:38:1c:91:ae:09:fb:25:23:77:f2:
43:ba:87:7a:8f:88:9b:1a:7a:66:c5:24:ff:e6:34:
63:8f:0a:27:03:07:16:c2:97:6b:aa:1d:0f:59:2b:
6a:f2:86:dc:88:00:e1:8a:f1:31:0b:e8:3b:39:68:
ba:97:a0:99:72:9e:ee:43:1c:b6:8b:92:09:1a:8c:
53:5b:d8:55:c0:b2:60:d4:4c:76:6f:41:d0:0c:d5:
57:17:65:ab:64:aa:7b:c5:9d:26:ee:24:9e:8c:bc:
e6:c9:28:26:39:ea:b7:be:c4:8c:e0:09:80:e1:e5:
59:ea:75:b4:32:53:37:c1:11:ff:67:b7:3a:10:48:
30:8b:7a:cb:66:63:fa:2a:cd:54:4f:5f:a7:26:96:
7d:5c:4b:23:3f:0b:a6:83:6a:14:53:a6:84:f1:08:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a9:7b:b1:66:e5:24:a8:44:74:83:fa:9e:e3:ea:7b:be:f2:
70:1e:85:cf:ad:1e:a0:53:1a:61:48:18:ff:ad:ae:10:db:5a:
53:03:5f:3a:85:6d:c9:fe:d1:1a:e5:0c:3c:eb:70:19:69:ec:
d7:c2:79:3b:73:87:ad:2f:1b:d9:4f:03:fc:fa:b8:95:86:a3:
17:ba:da:64:00:61:6c:19:c5:87:2b:7d:93:7e:68:2b:79:bf:
e5:2f:15:74:7c:71:ba:d6:97:c5:d9:f3:c2:53:f1:88:7b:50:
d6:14:57:34:b6:34:1b:58:df:c4:ec:64:6e:d8:91:a0:6f:ab:
ac:ca:5a:15:7c:41:35:2e:f3:0e:03:47:a0:a8:5f:c1:29:aa:
f2:a6:cd:a4:80:0e:aa:78:12:04:6e:72:1c:10:b2:1a:0d:0a:
5c:31:c6:c0:5f:fb:e9:e0:9f:e3:bd:2c:4d:e3:2c:2b:c5:7e:
68:7c:d3:c5:d0:7a:63:71:d0:35:e1:df:31:77:8c:03:cd:63:
b0:ad:18:c2:1a:ea:51:f0:eb:7f:d9:48:34:df:cb:94:d2:d9:
b3:c9:71:4c:7b:e0:98:12:a9:22:c7:f9:02:21:ed:cd:62:1c:
d0:7c:0f:3d:7c:bc:ab:ae:e4:13:ec:0f:a7:5c:2f:60:e0:a1:
7c:1a:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:06:47 2024 by rpki-client on console-ams.rpki-client.org