Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
File: vj908rbk4o6f9so8yjpdeMosrWo.cer (raw, json)
Hash identifier: jiAkVFNNcOvbBx3Ji/lKUV93WTg/u61DWCsx7Xwpaz4=
Subject key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF7086DA1B72DAFE99A5A9F456841
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29202
IP: 195.85.232.0/24
IP: 2001:678:934::/48
IP: 2001:67c:bf0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:08:6d:a1:b7:2d:af:e9:9a:5a:9f:45:68:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:9b:3c:56:ba:30:59:44:e9:04:01:f9:17:
23:9e:3e:52:85:1a:e4:03:65:fc:f9:60:b5:50:75:
74:95:ff:04:a8:48:05:a0:b4:44:ff:06:8b:44:3e:
d0:68:c9:d9:91:c9:ea:8c:aa:26:ad:fd:79:b4:2d:
d0:ff:e1:a6:6d:18:6b:40:0b:55:c5:12:5a:70:7f:
37:aa:14:07:7d:fa:ec:e5:59:ab:27:ef:f1:f9:61:
51:e7:f6:09:47:b7:13:30:26:c8:e2:42:49:87:82:
04:53:60:f3:e0:9d:06:55:c2:ae:56:3b:25:af:42:
02:0a:52:2b:e0:35:a5:92:57:d8:41:d3:e5:4d:01:
48:8a:f5:b4:d6:aa:a6:65:28:fc:7c:16:2a:1b:cb:
70:a8:e6:e4:71:9c:b2:44:f2:d5:c6:b7:0a:f7:cf:
a2:f1:1d:75:05:b7:37:4a:46:fe:e3:89:01:79:f1:
c3:d6:84:62:31:94:17:0f:f9:34:84:73:79:c0:fe:
cf:57:f6:f4:34:5e:22:d7:31:50:2b:6e:39:85:05:
4c:c7:3c:d6:e0:f7:41:6b:21:c5:4a:8e:47:cd:ea:
71:0c:18:6e:a0:e8:b2:91:b6:1b:d8:c7:d1:02:4c:
e9:29:c3:a3:a7:fa:61:a8:38:fe:ea:b7:cf:e3:ab:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.232.0/24
IPv6:
2001:678:934::/48
2001:67c:bf0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29202
Signature Algorithm: sha256WithRSAEncryption
61:5e:76:74:f8:79:73:b6:6b:b6:09:56:d7:4b:c4:ee:65:b3:
3d:57:a4:5b:06:91:64:09:6c:b1:9a:36:44:a0:2a:97:b6:83:
7c:ed:dd:69:d4:50:90:06:68:dc:bd:90:8f:10:37:0f:cf:18:
81:18:5e:ed:6f:72:97:88:59:82:25:99:62:46:7c:98:b7:88:
61:5b:ad:31:17:56:fe:6c:2b:d1:f2:7a:15:23:6c:d4:f6:09:
b9:ab:8a:37:73:f7:08:7e:f4:b8:72:ed:08:be:c6:ec:96:6f:
59:56:59:d4:8c:d5:6c:66:2c:46:12:84:09:0d:24:2b:3b:a2:
f0:b3:16:81:71:79:40:e6:98:41:67:65:4e:80:6c:49:40:4b:
09:ae:50:15:75:1d:f6:71:f0:65:af:fd:90:57:ed:66:ba:de:
77:cd:78:8e:c3:dd:e0:37:55:13:47:3a:93:e7:9a:b0:97:96:
a5:b1:9a:bf:0c:67:67:04:f8:0d:5d:ec:b7:01:30:29:89:f8:
15:a9:63:bb:05:9b:8f:12:4b:1a:a1:59:b1:30:99:6d:41:fc:
5e:73:9d:d6:7d:f9:28:c4:b9:d8:09:59:a5:57:d9:b4:ab:cd:
f0:88:18:31:a8:6c:7b:9d:1b:8b:75:e9:f7:7b:7f:3a:ec:18:
a3:17:15:ec
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAYzF2/cIbaG3La/pmlqfRWhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTNmNzRmMmI2ZTRlMjhlOWZmNmNhM2NjYTNhNWQ3OGNhMmNhZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A2bPFa6MFlE6QQB+Rcjnj5ShRrk
A2X8+WC1UHV0lf8EqEgFoLRE/waLRD7QaMnZkcnqjKomrf15tC3Q/+GmbRhrQAtV
xRJacH83qhQHffrs5VmrJ+/x+WFR5/YJR7cTMCbI4kJJh4IEU2Dz4J0GVcKuVjsl
r0ICClIr4DWlklfYQdPlTQFIivW01qqmZSj8fBYqG8twqObkcZyyRPLVxrcK98+i
8R11Bbc3Skb+44kBefHD1oRiMZQXD/k0hHN5wP7PV/b0NF4i1zFQK245hQVMxzzW
4PdBayHFSo5HzepxDBhuoOiykbYb2MfRAkzpKcOjp/phqDj+6rfP46tWGwIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFL4/dPK25OKOn/bKPMo6XXjKLK1qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzAwNWE0
Ny1iMTNjLTQyZDctODMzMi1kMDk5NjE3YmViNTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMDA1YTQ3
LWIxM2MtNDJkNy04MzMyLWQwOTk2MTdiZWI1Ni8xL3ZqOTA4cmJrNG82Zjlzbzh5
anBkZU1vc3JXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAMBAIAATAGAwQAw1XoMBgEAgACMBIDBwAgAQZ4CTQDBwAgAQZ8
C/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICchIwDQYJKoZIhvcNAQELBQADggEB
AGFednT4eXO2a7YJVtdLxO5lsz1XpFsGkWQJbLGaNkSgKpe2g3zt3WnUUJAGaNy9
kI8QNw/PGIEYXu1vcpeIWYIlmWJGfJi3iGFbrTEXVv5sK9HyehUjbNT2Cbmrijdz
9wh+9Lhy7Qi+xuyWb1lWWdSM1WxmLEYShAkNJCs7ovCzFoFxeUDmmEFnZU6AbElA
SwmuUBV1HfZx8GWv/ZBX7Wa63nfNeI7D3eA3VRNHOpPnmrCXlqWxmr8MZ2cE+A1d
7LcBMCmJ+BWpY7sFm48SSxqhWbEwmW1B/F5zndZ9+SjEudgJWaVX2bSrzfCIGDGo
bHudG4t16fd7fzrsGKMXFew=
-----END CERTIFICATE-----
Generated at Fri May 3 02:18:42 2024 by rpki-client on console-ams.rpki-client.org