Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
File: vosVwjfzTFxcU0S0B567OlidAUg.cer (raw, json)
Hash identifier: LnGwOkaJoEohLZL6E+0kZ7MBh6R79usbTkKsj7PXWFA=
Subject key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3ED2DD39A4C102B6719C8CF364F89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.0.223.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ed:2d:d3:9a:4c:10:2b:67:19:c8:cf:36:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:57:b3:33:7c:10:0c:a3:ab:2c:89:2c:99:
40:b8:8e:f3:1a:9c:f9:94:e7:83:21:fb:94:4f:4f:
30:03:bb:f9:88:69:db:0d:4c:b4:13:2c:52:91:2e:
6a:4b:2c:6e:20:4e:ad:5b:f3:24:99:82:13:76:1e:
c0:3d:86:a0:b0:13:e2:ae:83:64:86:06:be:6a:55:
6f:46:b1:c3:70:8f:4b:ba:d6:ba:ea:a2:11:2e:36:
0b:2c:78:5c:47:e9:53:54:df:3d:b8:50:95:e6:9e:
ea:85:f7:b9:d7:81:54:04:3d:d1:82:7a:c9:8a:16:
b5:20:88:c1:e9:50:1f:e2:5f:40:7a:c0:3d:77:90:
e9:6c:5d:95:3f:92:d4:7a:3e:b1:7d:70:d7:47:d2:
02:6f:b6:16:0f:59:7e:8d:88:2a:82:53:1c:80:a9:
84:70:37:9a:8d:dd:68:39:3d:5d:1f:55:fd:fd:98:
3a:46:2c:4e:65:2e:ce:40:0d:76:da:5a:de:79:d4:
a1:64:e3:8c:f9:e7:aa:1c:60:44:e9:8b:69:b2:a9:
6f:aa:0a:26:7f:a6:bb:de:9c:59:6d:69:5e:97:07:
d7:ca:93:ea:1d:4a:68:44:62:10:2d:78:40:c5:ab:
14:6f:c3:a1:50:eb:7b:34:33:52:9c:da:f7:91:96:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:be:ec:1d:36:da:6f:25:ca:e6:f4:ed:27:db:11:ef:6d:c2:
95:8f:f2:87:56:ba:6f:d0:36:4d:5f:21:57:e5:c8:eb:f1:b9:
8e:ff:fe:9e:be:6f:08:35:5d:11:a1:9f:03:66:60:ca:ce:da:
94:ae:bc:05:e4:ea:a1:92:f4:37:30:73:cd:7b:22:95:34:8d:
63:f6:38:1e:de:69:e4:5c:65:d9:f2:84:57:f0:fd:b9:d9:ae:
a4:53:7b:60:e7:67:34:83:26:d9:1c:7e:8f:ea:85:ec:6b:02:
64:01:77:b9:9a:05:52:a8:f8:48:b3:4d:81:c9:67:ad:69:8e:
ef:71:eb:88:4a:32:6e:92:59:a0:ff:92:84:7c:ef:b0:ad:56:
d1:4f:2c:55:1b:17:d8:cb:f1:56:c7:e8:9b:4a:d7:e7:fd:c9:
03:7e:70:9b:1b:61:69:8c:29:aa:7d:ff:43:4a:ed:78:7a:5e:
01:25:44:8d:e6:90:ee:d1:7c:62:53:48:9f:00:86:e3:31:c1:
ff:18:df:25:c5:96:2a:47:a4:4e:dd:3c:e1:be:b2:7c:0f:bc:
2b:ae:0e:e6:8d:21:9f:ee:74:92:b7:88:62:33:02:e5:52:9e:
85:43:90:df:e7:4f:e9:cf:74:d3:37:b1:9e:65:24:90:6f:63:
a8:1a:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:15 2025 by rpki-client