Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.cer (raw, json)
Hash identifier: NBX4pgw8o4hTkatvwTxnb3YmCLf+ySDck1Wmv8AlmOo=
Subject key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A580703D5D5A46AA97C2B74576424
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.32.0.0/16
IP: 193.84.104.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:58:07:03:d5:d5:a4:6a:a9:7c:2b:74:57:64:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bda61043542485096b0df4351cc0da977f3770dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:de:c1:ff:5a:70:cc:71:98:b7:a0:e1:8c:
ce:27:56:1e:0d:42:18:99:fc:67:5f:45:42:83:5c:
ff:14:a3:30:a3:d7:de:cf:0d:39:6c:0e:6c:c6:cf:
80:f4:62:c0:fd:d4:6c:b0:e2:38:65:a0:85:3e:a3:
14:61:1a:5b:c3:04:32:4a:f0:06:22:5f:3d:23:11:
6c:1c:ae:52:0d:68:f0:88:4d:ce:53:cf:7e:24:69:
9e:53:5b:55:2a:46:17:ab:2d:a5:2f:87:07:6d:4a:
b0:50:03:ca:b6:a6:7f:e8:d5:b7:0f:9f:c0:94:2d:
5e:de:df:2b:89:c4:9e:dc:76:e6:b5:70:72:01:3c:
44:76:16:c1:65:f1:82:e8:ef:56:92:e9:2d:97:25:
fc:85:c5:39:92:ce:56:dc:9d:83:c8:20:ff:40:90:
66:71:9a:ab:9b:a3:f0:94:a5:79:06:cd:da:9f:c8:
63:da:11:cc:01:17:8f:28:81:97:44:e1:da:82:4c:
bf:79:23:74:2d:7c:d6:3c:80:cc:a2:d7:0f:43:1f:
cb:f4:26:78:6f:91:36:86:c6:63:96:39:04:2f:6a:
c9:15:60:e4:69:6f:1f:3b:6e:f5:4d:25:fb:0c:ee:
f4:3b:8c:4e:75:69:d6:91:df:61:28:00:23:57:7c:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.32.0.0/16
193.84.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3e:a8:c4:d1:3d:9b:52:7b:6a:a2:1d:7b:85:46:37:67:a5:
e0:f9:77:cb:df:e6:70:89:71:80:ff:6c:14:cf:06:57:21:de:
06:bd:f7:6b:11:b3:3f:d0:f6:3c:87:86:7a:7b:57:3d:17:99:
d1:8c:6f:fc:47:b9:b4:e3:21:25:dd:79:b5:15:07:6f:4a:f6:
27:22:10:5c:e9:57:43:0a:4a:77:d8:f2:fa:bf:56:bc:6d:ec:
81:4f:c1:df:7e:74:9f:98:ca:95:2b:85:4b:a2:a2:5a:f2:78:
be:de:4b:17:0b:51:9b:fd:4a:eb:52:fd:b8:20:1c:83:95:48:
48:21:af:a9:f2:dc:c6:6a:46:8b:1c:4c:74:85:77:a1:d8:1d:
03:6f:43:2f:66:c4:06:4e:7c:1e:48:93:40:f4:d1:e0:0a:34:
4d:73:c3:58:e5:7b:96:6f:e6:f5:66:74:66:f0:bb:2d:28:5c:
ae:4b:56:2d:af:d1:d6:9b:17:30:f2:bc:72:30:8b:55:1c:e7:
6e:42:31:0d:ad:1a:5d:8c:cb:b5:1c:30:fc:b7:03:23:3c:85:
09:1a:78:5c:b9:b1:fd:32:a4:c6:28:ba:56:5d:f5:c2:6d:7b:
c4:d8:87:fc:95:28:d0:dc:0a:73:c0:89:01:6c:9d:9a:0d:05:
20:57:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:24 2024 by rpki-client on console-fra.rpki-client.org