Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
File: vZC8PjcRQLQqIdaX2DANlBCiSao.cer (raw, json)
Hash identifier: MNzgtcZxNaJSlZjjF7u2jokVe6t1RseQE1N6JSFpb9Y=
Subject key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0251DB5948C76BA2B22C068A727C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.234.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:51:db:59:48:c7:6b:a2:b2:2c:06:8a:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:6e:d1:cb:6b:9d:0e:ed:33:b4:63:85:56:
bf:c8:55:c5:87:4d:cc:54:49:23:60:ee:aa:aa:5b:
51:ff:f4:35:0a:d4:93:03:67:cc:1b:5f:26:3c:16:
a7:7f:02:5b:4a:fe:e3:39:00:79:56:4d:e6:a6:77:
d6:4a:6d:bc:7a:6a:14:0a:4a:a9:15:e3:4d:0d:07:
73:04:b4:cc:31:a8:a4:c2:4f:f6:3a:25:d5:5f:39:
34:0a:7b:e8:bf:da:d8:f5:e1:e7:03:a7:22:79:98:
4b:cb:60:0d:f3:76:a3:1a:c4:67:37:dd:4e:ec:96:
6c:dd:4b:d0:14:66:2f:6c:97:d3:5b:5b:d7:03:14:
ef:7d:40:66:cb:c4:a8:12:e3:83:ba:e1:61:ce:31:
9a:f9:07:81:00:84:16:2c:62:7f:2c:03:f6:c5:2f:
70:1b:5f:06:d5:00:a2:c2:50:82:42:2f:39:0b:2b:
67:46:20:ce:f4:f1:72:5a:3c:07:a2:74:2c:0e:e9:
30:38:9e:29:69:05:0a:91:dd:4b:44:2f:4f:56:79:
5e:be:46:c0:0e:e8:69:f0:59:b0:62:3e:09:d0:c5:
ed:85:d7:b3:37:d8:eb:7d:29:5f:9e:3c:b3:46:ba:
ea:9d:bd:94:8a:fb:1c:db:37:b3:81:a6:61:0f:11:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0f:a2:1f:da:b5:0f:56:a0:97:c6:2b:7c:59:f9:b2:03:80:
3e:97:6d:d8:4d:7b:8a:3c:1d:21:24:40:f5:8e:66:3e:cb:04:
c4:d9:e4:09:06:cd:c7:58:68:7c:d0:b5:7d:93:af:45:11:b3:
e4:5a:e8:d0:46:26:12:40:27:10:74:9b:c8:d6:e9:21:5d:1f:
68:18:32:3b:51:37:d1:40:1b:df:74:de:d1:05:3f:8a:d4:2b:
f2:bb:11:58:e9:c3:4d:56:a9:c8:99:fb:0f:84:52:3d:b3:d1:
c2:a2:1e:5a:70:67:ed:29:09:74:11:56:83:76:2d:0a:ca:bc:
f1:d5:69:cd:8b:ff:d5:82:c4:84:36:36:dc:0d:b7:c0:db:99:
27:30:18:2a:d8:d9:22:cd:c9:6d:1e:da:71:97:3c:fa:dc:5e:
23:ce:9e:fb:1b:b6:c1:7f:fc:38:4c:a0:62:f1:88:a0:7b:21:
58:98:f4:03:72:f8:24:55:ec:56:af:ec:2a:68:34:14:15:d1:
d3:57:51:4a:ae:34:26:4c:46:cb:a2:a3:ac:7e:1a:15:cb:6a:
b7:a2:24:a1:ce:39:2a:8b:0a:10:78:1a:42:fe:95:0c:7d:b4:
f5:73:0b:fb:e3:9b:1b:58:33:17:2f:13:5c:37:6c:ed:6b:1b:
10:a5:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:25 2024 by rpki-client on console-fra.rpki-client.org