Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
File: vhji2fUJydO0VREqoojTNhhYAaA.cer (raw, json)
Hash identifier: IgyUI49Mlel+UKTpPF555TJ1VdF9gduaz8kKVBey8zk=
Subject key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FE2A8AAF0BF443EE2C261CB3EE4AB333F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Jun 2024 09:50:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211425
IP: 91.151.85.0/24
IP: 91.151.92.0/24
IP: 193.56.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:a8:aa:f0:bf:44:3e:e2:c2:61:cb:3e:e4:ab:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 09:50:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:c4:0a:67:74:b0:4b:e3:90:79:ca:5d:1c:
e2:31:26:d1:58:00:8e:72:94:38:66:15:cc:6c:3f:
3b:51:86:66:cb:10:5b:12:15:6c:08:81:48:09:e3:
de:14:83:96:23:30:ba:10:e9:91:63:ff:33:1e:a1:
b6:03:11:d4:49:29:a0:4e:f1:93:19:8c:e2:bc:f6:
02:53:da:1f:39:36:9e:20:54:da:e7:27:24:e8:c7:
88:f5:7e:58:48:92:23:38:3d:3b:3b:e9:6b:cd:1b:
75:c1:33:26:82:80:1c:db:1d:13:99:a8:35:69:a9:
08:83:34:b6:df:b2:21:9e:59:c2:2c:3d:fd:57:92:
c6:20:e1:d1:07:aa:4a:84:a7:ac:d5:a8:03:5b:a1:
9e:39:7f:b7:05:6b:ed:63:8b:d5:8a:17:ed:98:6f:
7e:72:2b:04:1f:c7:d4:b0:48:5a:f9:02:2d:c0:be:
53:7f:48:2a:17:50:37:20:b9:d5:02:e1:d4:7b:45:
59:86:74:1b:98:f1:35:43:8f:a5:c8:7d:07:0e:cb:
de:0c:56:5d:7a:6c:ea:b7:e2:40:42:4a:b8:72:94:
e5:41:83:76:ea:b6:a8:50:69:6a:73:1d:93:e0:48:
a9:27:d7:bb:c1:a8:d4:03:69:11:10:41:2c:08:62:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.85.0/24
91.151.92.0/24
193.56.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211425
Signature Algorithm: sha256WithRSAEncryption
5b:8a:c6:01:75:d7:73:a9:05:43:1d:23:20:5b:c9:cd:44:cc:
7d:9f:60:6a:98:7d:3b:c8:29:42:14:03:6b:20:6e:63:bf:d4:
49:16:d8:79:86:ce:52:80:3a:be:96:59:1c:8a:7f:f9:8e:de:
73:73:c1:42:fb:32:0a:4c:4b:74:8f:98:e8:83:83:dd:d0:33:
79:aa:c5:89:87:7c:a9:20:69:2e:8e:08:43:13:9f:55:8e:b5:
46:4b:40:91:ed:f4:50:f9:d2:fe:8a:c9:8b:bf:0b:bc:61:6e:
27:24:af:c9:93:4d:ba:17:2d:c2:23:99:bf:ca:94:9f:6e:4b:
1a:4b:1d:62:fb:94:09:17:3e:e4:83:f4:7d:7e:de:95:3b:0c:
06:e0:d4:38:a3:f6:a4:d8:34:66:e8:d6:1f:8d:87:b7:f7:ce:
73:d0:00:99:88:24:7b:c4:58:2d:ce:3a:dc:9a:30:de:6e:d5:
b1:fd:a4:f7:44:a5:ac:a3:9b:28:91:bd:bc:66:83:02:e8:d7:
82:f4:59:27:69:ae:e8:27:61:d4:8e:6d:40:e8:8d:f0:a7:a8:
a2:1c:52:74:83:46:d3:01:bf:85:01:da:6d:e1:d4:80:b0:cc:
24:f0:75:24:ad:0e:0b:8b:1c:0c:f6:1a:b3:2f:e2:d0:8c:4d:
5d:8b:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:22 2024 by rpki-client on console-fra.rpki-client.org