Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
File: vh89wilTBsx9-HLO7M1olNDg6uY.cer (raw, json)
Hash identifier: YDd8b0aGynmLigTQt67gHlNeX5rxEM+Z8X3oDt3yRt8=
Subject key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B37C93D587507F62817B08E328622
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.130.200.0/22
IP: 2a0c:9000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:37:c9:3d:58:75:07:f6:28:17:b0:8e:32:86:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:e3:f8:f1:75:df:a2:48:7a:3a:dd:19:f8:
cf:a6:ac:59:a3:4b:ce:45:49:36:e9:3e:8a:5c:5e:
22:cb:26:84:8b:73:db:f6:2a:38:32:08:01:8d:35:
cc:9d:dd:83:ab:e4:17:fe:72:99:5f:90:71:9b:c8:
1b:44:35:7e:39:69:e7:fb:56:b1:ac:bb:1c:8b:0d:
ac:18:b4:f0:68:10:3f:30:1b:ec:68:61:be:fc:aa:
74:e7:df:f3:85:d6:f0:cc:03:51:10:c8:b6:8b:87:
01:e7:be:30:72:ba:20:ac:4d:58:27:27:33:86:7a:
13:8e:52:84:fb:d4:2b:9f:70:6e:f7:82:16:1f:9d:
11:2e:ec:a1:f3:0a:41:b8:c2:0e:cb:aa:60:05:2c:
d4:17:5a:12:a4:cc:cb:b4:e0:37:be:67:0b:67:42:
e3:87:52:db:78:4d:dd:df:32:86:58:5d:68:d8:10:
f4:a6:19:7d:a3:8b:48:66:e5:b5:9c:59:71:19:07:
16:4f:05:4c:87:a9:5c:e2:dc:dd:54:d3:c6:32:a1:
00:27:6e:f7:aa:3f:e3:ba:cf:96:78:00:76:15:51:
64:e1:ae:08:48:93:1d:19:87:75:70:9f:05:cb:7d:
03:0f:df:8d:ec:9d:f6:4c:9f:4d:11:15:e2:8b:68:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
IPv6:
2a0c:9000::/29
Signature Algorithm: sha256WithRSAEncryption
05:e2:24:21:9f:91:a1:17:b9:78:e6:96:ab:22:42:d9:58:ed:
44:77:14:71:09:fd:a9:c8:11:74:2a:8a:0d:a6:05:b4:5a:87:
ca:a2:62:a8:a5:81:6d:c3:ac:05:4f:bf:13:27:3f:66:32:64:
31:25:19:83:1e:07:9f:94:c1:5a:cc:fe:b1:c0:e6:cd:f1:bb:
c9:43:b3:2a:46:f3:12:5f:18:53:fc:3b:df:ac:93:91:1d:9a:
f5:05:86:76:56:57:44:6b:02:10:f3:ce:e0:73:21:8d:90:02:
54:d7:ed:80:f6:2d:ab:59:3e:ca:07:a1:ee:98:72:d0:45:3c:
4b:63:97:55:c2:b2:b6:45:e6:df:63:d8:9b:7a:2f:a0:6a:34:
62:2d:77:16:92:d7:fa:fd:18:cb:a4:8a:2f:a4:10:20:4e:c3:
f9:df:b7:fb:70:5a:81:19:27:ef:e9:00:20:02:30:ef:15:a3:
c2:e5:eb:00:51:3f:b5:c4:b1:52:6d:60:54:be:19:8c:83:9b:
f8:70:b4:d4:01:43:0b:3b:48:49:74:c7:71:28:45:91:3c:d3:
c5:80:11:e0:d1:4b:bc:ae:97:ee:d0:6f:c9:67:b9:c0:cd:29:
09:90:de:1a:f2:56:6c:23:25:b1:1b:10:68:3b:55:84:d2:5a:
3a:97:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:16 2024 by rpki-client on console-ams.rpki-client.org