Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer (raw, json)
Hash identifier: gnv9hHJnnqb7k7rHmyHuKZ2+ovF/+XsiwjYWis37Ido=
Subject key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC433AABCD571BC36C4E2EBE22BDCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59842
IP: 91.220.245.0/24
IP: 185.36.12.0/22
IP: 2a00:eaa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:3a:ab:cd:57:1b:c3:6c:4e:2e:be:22:bd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:e3:eb:1e:68:46:9e:35:c9:8e:84:af:f7:
f8:e5:56:3e:bd:8f:33:a0:01:57:06:0f:57:36:f2:
07:fc:c9:05:c7:bd:1f:22:14:ea:dd:eb:a7:9c:67:
87:70:52:49:b2:54:53:6c:e4:f0:78:8e:93:c5:a7:
ed:94:8c:1f:9a:5e:ae:ff:fd:bc:1d:73:1f:ed:d7:
c4:bf:ca:c1:7e:92:ab:5b:a2:40:89:35:0b:54:c5:
bd:74:aa:d5:7f:71:64:0a:77:3f:d9:f8:5e:47:32:
ec:a9:71:8a:aa:56:58:93:22:74:a9:ff:a2:53:37:
d8:ef:11:d3:fb:a0:3c:57:a5:41:56:14:35:f5:60:
8e:67:f9:10:ac:93:64:a7:b6:63:56:c1:f0:7a:9b:
a5:44:cf:ab:5e:2d:e6:c3:6a:16:6d:a6:c7:76:1f:
04:cb:fd:72:f0:d7:f3:3e:64:74:1d:2e:42:a3:c7:
e7:d0:11:1e:b0:9f:dc:7b:3a:25:48:e6:e2:eb:f1:
26:34:b3:c6:df:a2:f8:ea:a5:f1:55:cd:be:81:ae:
4a:44:b9:a0:78:e3:be:1e:4e:81:c9:a0:0b:de:e1:
2c:d3:1e:9f:c4:d4:31:95:a8:af:2f:3c:ae:00:e8:
1e:65:a8:ab:aa:26:16:29:82:a6:eb:a3:bd:0c:17:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.245.0/24
185.36.12.0/22
IPv6:
2a00:eaa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59842
Signature Algorithm: sha256WithRSAEncryption
12:55:a7:7d:0a:ea:c6:69:77:a2:da:97:ac:8a:7f:f8:29:c5:
62:9a:34:c5:c3:25:c2:05:39:9f:fc:2e:58:96:17:0e:c0:6f:
1b:23:d6:7b:b3:8a:b9:6d:4f:49:9d:11:73:1e:cf:f8:34:23:
30:e2:7f:86:01:5c:b6:17:16:57:5f:6a:bb:13:b3:63:af:7c:
f3:ff:bb:e2:a6:7f:9d:59:be:22:3e:24:2a:a2:e2:8f:ac:7b:
ae:8b:fc:f2:6b:12:2b:08:6f:32:e5:b0:91:37:cf:b5:d0:78:
09:b1:fb:63:69:42:5d:e8:8d:cc:d9:db:21:e4:d4:fe:bf:b0:
a4:24:3a:85:52:8c:00:b6:26:41:3b:ad:1f:51:cc:25:61:f6:
86:c3:ae:bf:49:c2:e4:6d:97:87:aa:f3:eb:e5:d6:c3:72:2d:
c6:52:bd:b1:94:b5:69:be:8e:b7:e4:1d:38:20:6e:f2:f9:49:
56:9c:f9:0e:36:e6:8a:c8:46:3e:a9:f4:10:bb:c6:aa:75:ca:
c9:81:bf:47:14:14:d9:c3:4c:34:23:4a:f5:be:53:1a:7d:21:
a7:5c:45:9b:3a:fe:6c:ca:1d:4a:4c:19:60:d6:0d:bf:2f:a9:
11:45:95:80:21:5f:92:e5:46:93:0a:c3:9f:34:f9:03:ee:e4:
71:85:46:27
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQi/EM6q81XG8NsTi6+Ir3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGZhMzYzMzQ2YzEyZjgzYzYwZDdiNWNmZGVmZWNkM2U3ZmYwZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLDj6x5oRp41yY6Er/f45VY+vY8z
oAFXBg9XNvIH/MkFx70fIhTq3eunnGeHcFJJslRTbOTweI6TxaftlIwfml6u//28
HXMf7dfEv8rBfpKrW6JAiTULVMW9dKrVf3FkCnc/2fheRzLsqXGKqlZYkyJ0qf+i
UzfY7xHT+6A8V6VBVhQ19WCOZ/kQrJNkp7ZjVsHwepulRM+rXi3mw2oWbabHdh8E
y/1y8NfzPmR0HS5Co8fn0BEesJ/cezolSObi6/EmNLPG36L46qXxVc2+ga5KRLmg
eOO+Hk6ByaAL3uEs0x6fxNQxlaivLzyuAOgeZairqiYWKYKm66O9DBez7QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFL36NjNGwS+Dxg17XP3v7NPn/w4qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2RkZjA2
ZS1kYjhiLTQ1ODktYTY1Ni0xNzE2MTQ2NjQ0ZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZGRmMDZl
LWRiOGItNDU4OS1hNjU2LTE3MTYxNDY2NDRlNi8xL3ZmbzJNMGJCTDRQR0RYdGNf
ZV9zMC1mX0Rpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW9z1AwQCuSQMMA0EAgACMAcDBQAqAOqgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpwjANBgkqhkiG9w0BAQsFAAOCAQEAElWn
fQrqxml3otqXrIp/+CnFYpo0xcMlwgU5n/wuWJYXDsBvGyPWe7OKuW1PSZ0Rcx7P
+DQjMOJ/hgFcthcWV19quxOzY6988/+74qZ/nVm+Ij4kKqLij6x7rov88msSKwhv
MuWwkTfPtdB4CbH7Y2lCXeiNzNnbIeTU/r+wpCQ6hVKMALYmQTutH1HMJWH2hsOu
v0nC5G2Xh6rz6+XWw3ItxlK9sZS1ab6Ot+QdOCBu8vlJVpz5DjbmishGPqn0ELvG
qnXKyYG/RxQU2cNMNCNK9b5TGn0hp1xFmzr+bModSkwZYNYNvy+pEUWVgCFfkuVG
kwrDnzT5A+7kcYVGJw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:16 2025 by rpki-client