Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer (raw, json)
Hash identifier: 1BDOqAhuNvfRHRtwPxo6ki0HopKkptoMCIrvsnrPbCc=
Subject key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE63AB64131753EFB68650669E2B78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59842
IP: 91.220.245.0/24
IP: 185.36.12.0/22
IP: 2a00:eaa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:63:ab:64:13:17:53:ef:b6:86:50:66:9e:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:e3:eb:1e:68:46:9e:35:c9:8e:84:af:f7:
f8:e5:56:3e:bd:8f:33:a0:01:57:06:0f:57:36:f2:
07:fc:c9:05:c7:bd:1f:22:14:ea:dd:eb:a7:9c:67:
87:70:52:49:b2:54:53:6c:e4:f0:78:8e:93:c5:a7:
ed:94:8c:1f:9a:5e:ae:ff:fd:bc:1d:73:1f:ed:d7:
c4:bf:ca:c1:7e:92:ab:5b:a2:40:89:35:0b:54:c5:
bd:74:aa:d5:7f:71:64:0a:77:3f:d9:f8:5e:47:32:
ec:a9:71:8a:aa:56:58:93:22:74:a9:ff:a2:53:37:
d8:ef:11:d3:fb:a0:3c:57:a5:41:56:14:35:f5:60:
8e:67:f9:10:ac:93:64:a7:b6:63:56:c1:f0:7a:9b:
a5:44:cf:ab:5e:2d:e6:c3:6a:16:6d:a6:c7:76:1f:
04:cb:fd:72:f0:d7:f3:3e:64:74:1d:2e:42:a3:c7:
e7:d0:11:1e:b0:9f:dc:7b:3a:25:48:e6:e2:eb:f1:
26:34:b3:c6:df:a2:f8:ea:a5:f1:55:cd:be:81:ae:
4a:44:b9:a0:78:e3:be:1e:4e:81:c9:a0:0b:de:e1:
2c:d3:1e:9f:c4:d4:31:95:a8:af:2f:3c:ae:00:e8:
1e:65:a8:ab:aa:26:16:29:82:a6:eb:a3:bd:0c:17:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.245.0/24
185.36.12.0/22
IPv6:
2a00:eaa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59842
Signature Algorithm: sha256WithRSAEncryption
15:40:63:31:66:68:04:8b:38:33:9b:30:15:9d:fd:20:63:9b:
09:25:5c:5f:5b:c4:2d:37:ca:5b:ca:c1:cc:f6:5d:8e:58:58:
ea:a4:68:9f:b7:5b:bd:cd:41:0f:c9:d2:8d:95:cb:24:91:9e:
92:e1:3f:dc:ae:58:30:c9:ed:ff:41:53:21:af:20:ae:fc:58:
96:e4:44:0b:be:ef:b8:fd:3d:31:a3:4a:d4:15:e4:22:d5:11:
f8:eb:91:49:96:87:e3:e6:94:ae:7d:2b:02:f1:5e:57:2c:47:
7a:62:6d:e4:f1:3d:83:f8:b6:d2:32:b8:fd:95:6f:9d:d5:ef:
f0:85:d9:f2:c9:01:10:69:5b:81:1b:c2:9f:b3:05:d4:8e:cd:
83:68:0f:2b:49:ea:6d:f0:de:34:d8:3f:12:19:82:36:32:24:
f4:3f:5e:8e:eb:25:b8:d9:d2:63:7b:be:49:70:8b:52:a1:8c:
0f:d9:1f:a5:cc:d9:b4:c4:4f:66:51:54:6f:52:f6:32:6b:60:
c7:d2:e2:e2:5f:e7:0d:d7:b1:71:54:61:6f:de:fd:a3:2b:4f:
2a:0e:cb:54:11:96:11:96:d4:47:f9:57:2a:0a:37:1e:b0:93:
db:e6:12:9b:7e:0a:82:a1:c3:ad:24:55:3c:3d:02:46:d9:a4:
17:34:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:05:09 2024 by rpki-client on console-fra.rpki-client.org