Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer (raw, json)
Hash identifier: sEpmNULTtbfXYg0473aIHq2AtDzTCKEsTeVZGTqVXsE=
Subject key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DFEDFE2470C689BBD409404BEB0CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43356
IP: 77.92.0.0/19
IP: 185.208.108.0/22
IP: 193.201.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fe:df:e2:47:0c:68:9b:bd:40:94:04:be:b0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd82e60d072e5185435a900e323f463806d433c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:d6:25:38:b6:a3:54:b4:1f:60:9c:4f:87:
96:82:03:b0:3a:03:19:3b:2c:3d:a6:31:c2:2a:2e:
ac:c7:94:95:ca:b0:da:e2:07:f9:0a:46:20:51:5b:
43:24:a6:71:bf:64:51:e5:05:c8:92:7e:78:d1:b1:
47:35:6c:18:7b:28:c8:ec:da:55:b3:6b:16:55:aa:
38:56:7e:63:f1:51:49:13:63:2c:02:92:6b:68:b4:
36:2e:63:e2:c8:f6:38:5d:f2:b8:a1:a1:37:90:8c:
52:dd:cf:90:bd:40:15:1b:95:3b:21:7e:20:f6:5b:
c0:bd:9c:2b:51:01:84:0d:4d:5d:ec:c3:6c:f5:74:
ff:7b:82:c9:54:25:ad:6d:e2:96:de:9a:35:42:29:
97:e8:41:cb:70:7a:51:e5:8c:93:d8:66:c3:4e:52:
f5:9e:ac:76:b2:48:03:7b:79:d9:29:76:26:7d:ad:
00:ff:62:9a:b2:36:48:f5:f2:5e:3f:0c:51:b9:51:
bf:61:2e:6e:64:9b:e0:55:18:d7:10:5f:df:02:42:
cf:91:46:50:83:c1:2a:ad:f9:fd:ff:fe:28:31:ff:
f1:4b:40:a0:d4:6e:e9:70:4c:19:62:e5:d6:14:d3:
6c:26:92:45:1e:e3:f8:02:b7:6e:f2:22:19:79:ed:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.0.0/19
185.208.108.0/22
193.201.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43356
Signature Algorithm: sha256WithRSAEncryption
25:5e:6b:58:26:bd:ea:b7:62:8e:17:a9:ab:4e:79:4d:85:80:
c7:7c:24:23:09:cb:b2:a5:c3:e5:76:f1:a0:ea:60:99:37:b9:
d0:67:25:32:1d:3b:9b:1d:5e:cd:83:96:f7:ae:14:b3:12:4d:
81:fa:f1:c8:fb:58:25:42:0f:e7:5b:f1:50:74:92:cc:e5:f0:
2d:48:da:ce:1d:68:af:b5:fb:d2:77:68:9b:c2:c4:85:3d:46:
d5:03:d4:17:b9:78:06:85:89:36:ad:b8:66:1f:fd:34:32:05:
69:e6:28:2e:ec:68:ef:0c:42:01:bb:9e:bc:13:46:49:79:f9:
e8:3a:bc:a9:db:76:38:da:50:86:6d:91:ca:12:0b:b2:ab:12:
c8:d9:a0:8f:5d:cc:ff:e0:49:b4:a1:c3:06:b9:7b:4a:e7:fd:
8c:90:ae:e2:be:87:41:30:bc:f4:8f:3f:3b:0e:25:37:26:c0:
e9:b4:ab:bc:5b:3e:d0:37:9d:31:8c:2e:d2:25:80:b1:a0:a9:
58:48:67:c9:b1:4b:e5:5a:db:13:32:20:5c:77:8e:62:4c:3b:
cb:be:9b:57:72:43:db:99:23:87:99:b3:48:37:fb:4d:25:05:
93:19:3c:f0:bc:e7:24:e9:39:40:e8:cc:e7:b5:b9:23:91:34:
be:78:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:24 2024 by rpki-client on console-fra.rpki-client.org