Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
File: vWqnNi02eSy8-oNgm111zJZfP68.cer (raw, json)
Hash identifier: nmxNOaDTZO4UrCudKzQYZ8j23eem8LcgB4oSmnkGDi0=
Subject key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF422FE05C3C681CFC28C87CAE6F7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208669
IP: 85.202.92.0 -- 85.202.94.255
IP: 2a10:1900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:42:2f:e0:5c:3c:68:1c:fc:28:c8:7c:ae:6f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:30:00:c4:99:e8:8d:57:eb:96:ca:0b:73:
9c:b1:8f:32:2f:25:f9:8b:c9:af:3c:77:dd:01:ea:
38:95:3f:3c:46:e2:ba:c8:58:4c:fc:10:b3:58:b6:
45:fe:e0:0c:48:da:e5:b3:d7:ef:9b:ef:e6:d0:da:
f2:2b:7e:5b:46:83:c3:7a:59:7a:57:7f:40:20:77:
40:a8:8d:c3:19:3f:56:1f:a8:2e:02:29:a5:4b:7b:
b6:49:a3:e2:a3:6d:34:34:64:ba:7a:15:18:81:11:
02:87:ab:09:34:90:92:c0:55:93:42:e6:2c:e4:fa:
00:ab:51:5a:c5:5d:59:25:7b:50:bd:8c:c6:b7:96:
7a:10:6b:02:3f:d5:30:97:72:36:b4:1b:b8:d6:75:
67:63:19:34:92:11:bb:3a:33:8e:f0:c9:d4:9c:39:
a2:b7:e8:e3:32:d4:ab:8f:24:47:2b:99:a8:20:67:
a9:fc:bc:2f:d7:af:d1:70:f1:04:47:e7:5b:70:85:
a2:80:80:ac:ad:22:d9:07:db:a9:92:e9:b9:4d:47:
65:77:31:39:cb:86:cd:23:7d:77:71:fd:4c:18:be:
ec:93:cb:97:85:2d:a8:7f:fd:ad:f1:5b:ad:2f:f4:
cd:ce:58:e2:b7:af:96:74:b0:7d:59:09:37:44:a0:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.92.0-85.202.94.255
IPv6:
2a10:1900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208669
Signature Algorithm: sha256WithRSAEncryption
ad:73:18:04:8a:3c:48:70:28:02:38:e6:c2:96:a4:e5:e0:0b:
5a:38:65:14:db:48:c5:31:7e:be:0e:23:08:bb:2a:bc:11:3b:
98:d0:61:d3:90:3a:38:77:68:c3:3b:ca:2f:54:b3:8e:65:b1:
22:a8:9e:2c:f2:7e:24:5d:04:6e:69:81:78:b7:fa:cf:df:bd:
f5:30:5a:9d:50:8c:62:29:53:5f:be:65:96:fa:0e:fb:92:b0:
29:45:ed:e9:ea:f3:b0:23:17:67:6a:dc:ee:f1:bc:fe:90:f2:
bd:22:7d:34:8e:da:35:49:37:f4:e1:1e:8b:0f:e9:f3:6e:b4:
f4:35:aa:0e:8f:3f:b0:1c:13:e3:67:1c:67:b6:c1:a1:c8:90:
de:71:10:f1:d0:ff:d5:12:56:c5:6a:d5:23:d7:86:82:ce:c3:
20:16:c6:b0:11:45:4e:e6:9f:7d:b3:fc:50:5f:59:10:be:5d:
92:57:bf:df:42:d0:ad:6f:8d:76:29:68:9b:27:68:f8:47:ef:
05:0f:12:4f:1a:c3:ee:b2:bc:ea:a9:b5:df:ce:33:d2:de:af:
ff:2d:6e:99:e8:c1:17:03:dc:05:c1:04:15:57:3c:02:07:74:
fc:5e:fb:54:bf:f8:a6:df:ca:74:9e:78:ae:4c:7d:d8:2d:fd:
1f:d7:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:10 2024 by rpki-client on console-ams.rpki-client.org