Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
File: vjxU0e3KaS9Eydo4NALCT95yNQc.cer (raw, json)
Hash identifier: 48oLs2WKA/mLIsqD9kEujfFKjjLOERU+U9LP6rBkePw=
Subject key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB0D861E3EEAE1FAAB7DDB0EC4E578
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.42.221.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0d:86:1e:3e:ea:e1:fa:ab:7d:db:0e:c4:e5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3c54d1edca692f44c9da383402c24fde723507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:2c:83:77:40:0c:47:04:c0:f3:34:f8:4d:
ca:f8:6d:58:4a:c0:88:4c:0b:7c:f1:fe:81:b4:53:
14:c3:12:e0:d1:49:76:62:fe:bb:79:bb:7b:74:5f:
63:99:c3:62:fe:93:08:58:9e:8a:dc:0e:d8:4e:38:
f6:14:62:db:e5:0c:83:bd:8c:6a:57:22:9d:ed:f8:
62:b6:1d:0e:d6:cf:06:d5:18:b0:39:df:dd:a1:61:
c7:bd:25:9a:2f:67:d7:4d:d9:0d:47:b9:9f:04:c2:
39:a4:27:c8:10:d0:dd:d7:46:f1:b7:97:cb:68:38:
20:73:e5:2d:e0:53:81:b5:e4:f3:f6:01:25:57:01:
61:83:e2:cd:6a:72:db:87:cf:34:f1:0b:9e:fc:08:
70:ec:59:83:96:fe:cd:d1:76:9e:e0:91:b9:ff:74:
91:9d:7e:a4:ee:30:35:dc:26:df:5f:f0:b3:ea:0b:
a9:20:72:fc:76:bc:2c:5b:5f:b6:f3:a9:c8:91:09:
76:e6:e2:84:2b:11:ab:6d:47:e9:d5:51:d8:e5:49:
fb:fb:d8:a6:46:f4:6c:27:96:18:97:63:9e:5d:8b:
79:35:0f:a7:d0:03:02:40:00:58:38:f2:ee:32:7e:
83:7d:82:77:68:2d:4c:ef:04:78:94:64:92:df:64:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:09:c9:e8:cf:a2:b4:01:56:1b:f8:a0:3c:f7:2e:68:a9:86:
06:b5:51:93:8a:a5:3d:32:fd:3c:0f:85:5e:e7:b8:34:11:0c:
4d:70:63:f3:7c:f0:21:3e:66:5c:2e:b5:75:ed:31:71:53:87:
f6:40:da:7c:69:64:c7:e6:72:98:ea:7f:cd:f5:7e:03:9a:f5:
d4:ff:53:45:a8:90:0c:7f:43:2e:38:b6:7a:ae:b2:86:a3:d4:
f4:b4:dd:b1:e3:b2:9d:51:36:bd:49:03:58:a6:a7:d4:54:f4:
1c:e1:18:70:d9:4b:b4:33:e8:3e:99:8c:f8:15:9a:79:dc:be:
dc:32:1b:73:f5:23:a7:4b:e2:8c:8a:12:a7:3d:9a:5c:4a:31:
91:36:cf:e9:4e:ef:f9:16:4c:82:8c:a6:5b:eb:80:c8:96:19:
33:1a:5b:35:f4:25:82:e2:58:83:00:90:f5:11:e2:be:10:59:
c8:b7:e6:0d:70:b1:f0:8e:ea:dd:b7:73:83:6c:d0:d9:0f:37:
00:84:15:7a:92:6e:e0:bb:de:5a:74:d3:4c:1d:a0:02:fe:65:
49:05:86:01:30:33:25:e8:00:99:eb:eb:78:fb:9d:6f:8d:1a:
b3:13:b4:14:eb:fc:20:e1:c7:8f:7f:b0:6d:14:8e:0a:11:9c:
f0:19:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:05:13 2024 by rpki-client on console-fra.rpki-client.org