Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer (raw, json)
Hash identifier: fAiqdTc2MAHh5jeBKCbtjTkxd4EJAhnu71jX4Y7xFJA=
Subject key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42507E90CD52916264BC932BD2CA495
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41202
IP: 37.110.208.0/21
IP: 185.183.240.0/22
IP: 2a0b:1c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:07:e9:0c:d5:29:16:26:4b:c9:32:bd:2c:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:7e:41:06:c7:a4:bb:9e:21:d4:bd:b8:f4:
06:d3:24:50:85:43:41:41:87:b1:56:64:cf:41:da:
ab:50:c0:cc:6b:a1:e3:46:8c:ac:4e:c9:2b:b0:e7:
11:3f:07:2f:a7:29:b5:ab:61:8e:e7:49:a2:23:04:
43:29:53:22:8d:b1:06:d2:70:87:a5:8e:ff:2c:bf:
c2:86:77:ab:cd:d4:f6:eb:b4:58:ea:93:66:6b:56:
d5:a0:24:cc:38:1a:a4:32:ae:83:7d:ad:c0:7e:ba:
40:e5:0b:df:7f:b3:93:85:a8:f1:bf:a8:2a:a3:39:
bc:35:97:e2:9f:07:94:64:47:b5:87:f3:62:3d:24:
55:00:d8:63:ba:c1:96:96:8e:f7:09:f7:4a:72:ac:
a0:4d:13:20:65:91:e4:23:25:65:9f:f9:56:d3:d2:
e9:b2:80:37:c8:f2:70:cb:cf:4e:50:4a:ab:8b:ff:
5d:83:8a:8f:b4:88:9b:65:9a:6d:81:c6:78:f5:f9:
91:4a:a6:0e:84:44:3d:17:9c:dc:95:57:3f:6f:25:
cc:20:93:45:d0:19:31:08:98:ab:7e:84:26:e8:45:
dd:ac:e7:f7:ea:fa:33:12:17:57:62:4f:1f:3d:86:
1b:6d:f0:b8:75:d5:a1:9f:e5:5a:2b:ec:77:8f:3d:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.208.0/21
185.183.240.0/22
IPv6:
2a0b:1c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41202
Signature Algorithm: sha256WithRSAEncryption
73:92:76:9f:ca:6f:84:48:52:b2:39:ad:e1:01:46:98:a2:b5:
a6:79:1e:56:da:63:16:f8:7b:93:46:68:09:bf:8f:8e:66:60:
88:49:d7:46:b4:39:a1:2c:1a:67:60:27:17:6a:f7:c4:94:9b:
da:41:a5:29:dd:76:94:be:00:9e:45:12:d3:ef:4d:ad:6b:dd:
5f:95:2a:58:83:2e:46:cc:f7:fa:d9:db:19:1c:64:87:dd:d5:
16:28:b2:e9:b0:7a:6e:5b:39:fb:a1:84:8e:d9:97:a1:2c:c9:
9f:fe:ce:30:77:75:bf:66:dd:fd:9f:d9:99:f8:b8:50:d6:a3:
60:62:79:6a:55:34:28:03:3b:b0:88:f1:00:d8:bb:2f:9c:d6:
9f:60:c3:d9:c0:83:ab:b5:a2:9b:88:d1:31:b3:09:4f:4f:69:
7c:ec:e9:19:f6:c6:e1:c3:d0:c8:d4:b3:4f:8b:b1:03:9e:a3:
58:78:5f:7c:1f:11:8c:e3:de:84:22:19:fc:8e:05:50:b7:96:
12:5a:93:20:50:88:23:81:4c:b5:62:d9:9a:fd:43:c1:c0:d2:
a3:9a:0b:07:ee:49:18:fc:24:ae:8e:ad:44:32:4b:52:77:c2:
02:c8:67:fc:bd:4b:24:d3:9e:67:08:6b:60:4d:e7:75:35:f9:
01:5e:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:18:41 2024 by rpki-client on console-ams.rpki-client.org