Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
File: vhji2fUJydO0VREqoojTNhhYAaA.cer (raw, json)
Hash identifier: Oas3QMZM31rC8XIBwNtyr3xuCcuFuwX/tHXBXEnT0wA=
Subject key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5B1F9CADD2DE23D2C0555F8CC990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211425
IP: 193.56.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5b:1f:9c:ad:d2:de:23:d2:c0:55:5f:8c:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:c4:0a:67:74:b0:4b:e3:90:79:ca:5d:1c:
e2:31:26:d1:58:00:8e:72:94:38:66:15:cc:6c:3f:
3b:51:86:66:cb:10:5b:12:15:6c:08:81:48:09:e3:
de:14:83:96:23:30:ba:10:e9:91:63:ff:33:1e:a1:
b6:03:11:d4:49:29:a0:4e:f1:93:19:8c:e2:bc:f6:
02:53:da:1f:39:36:9e:20:54:da:e7:27:24:e8:c7:
88:f5:7e:58:48:92:23:38:3d:3b:3b:e9:6b:cd:1b:
75:c1:33:26:82:80:1c:db:1d:13:99:a8:35:69:a9:
08:83:34:b6:df:b2:21:9e:59:c2:2c:3d:fd:57:92:
c6:20:e1:d1:07:aa:4a:84:a7:ac:d5:a8:03:5b:a1:
9e:39:7f:b7:05:6b:ed:63:8b:d5:8a:17:ed:98:6f:
7e:72:2b:04:1f:c7:d4:b0:48:5a:f9:02:2d:c0:be:
53:7f:48:2a:17:50:37:20:b9:d5:02:e1:d4:7b:45:
59:86:74:1b:98:f1:35:43:8f:a5:c8:7d:07:0e:cb:
de:0c:56:5d:7a:6c:ea:b7:e2:40:42:4a:b8:72:94:
e5:41:83:76:ea:b6:a8:50:69:6a:73:1d:93:e0:48:
a9:27:d7:bb:c1:a8:d4:03:69:11:10:41:2c:08:62:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211425
Signature Algorithm: sha256WithRSAEncryption
3c:92:2d:b0:d7:85:dc:fa:b6:91:a5:3b:4c:a1:bc:aa:87:9c:
50:9f:97:ae:30:a3:94:ae:d6:6b:a0:8b:02:63:d3:53:ad:a7:
16:1e:03:a5:76:ce:62:5d:6c:b6:c5:8c:84:b3:5a:91:d2:72:
ec:01:35:39:d3:93:cc:da:83:05:05:99:14:4c:bc:2f:60:e6:
45:71:e5:58:69:9b:d3:f6:27:49:8a:00:d1:d6:0b:95:9c:54:
f7:68:3c:ca:4f:e4:1c:3d:ec:1a:38:c5:51:c3:89:4e:21:eb:
35:fd:97:35:e4:f2:2e:3c:a4:9c:bf:3e:30:b1:9b:76:07:b3:
b9:2f:c9:df:09:de:e9:5c:be:a7:3e:48:4e:9e:37:a1:59:ba:
b5:67:97:ba:b1:65:a5:31:e9:87:c3:2b:48:b5:0e:98:41:dd:
32:72:52:44:b0:91:a3:29:25:2c:b6:fb:1f:45:a5:66:ae:f5:
30:67:41:21:f1:31:d8:47:5a:24:e9:15:f0:a9:e5:c4:03:79:
7f:33:88:a7:48:06:89:aa:01:9d:0e:9d:7d:4d:c8:f4:84:eb:
ab:88:57:a8:bc:9e:7d:d2:db:8a:1c:d8:9f:b2:6c:e3:70:68:
27:08:62:85:9c:c5:7d:41:db:f5:05:11:62:3a:02:9f:f1:ff:
17:01:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:06:54 2024 by rpki-client on console-ams.rpki-client.org