Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.cer (raw, json)
Hash identifier: vySBb9XEq1ZBJMURWXH0C+pky0UpSi6TC8pEui4T62Q=
Subject key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE14442A8BE73F715E8C5F7E0EE472
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43014
IP: 193.200.177.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:14:44:2a:8b:e7:3f:71:5e:8c:5f:7e:0e:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:88:48:b8:91:7f:e7:f0:1d:c7:cd:8b:25:
04:12:1e:c1:1c:17:3e:b1:60:14:3d:59:5a:db:cf:
1e:e8:69:55:72:58:e3:4f:bc:4c:de:59:af:f9:f2:
1c:61:5e:f1:8b:b7:02:98:33:a3:f0:28:02:21:3b:
bb:ea:52:8a:fd:c8:df:c2:57:62:33:7c:ec:4e:85:
5c:11:0f:ac:0e:4a:f1:48:d3:b4:ec:ae:f9:5d:14:
17:d0:3f:05:fb:fb:3b:b8:2d:ca:3d:da:62:5b:33:
a1:17:17:1c:2e:d8:12:cb:f0:0c:0b:36:88:81:ff:
41:82:db:a2:1c:07:df:1e:8e:d4:20:88:53:1c:2f:
3d:bb:31:29:65:38:6a:3a:77:db:af:b2:97:ef:61:
1a:f9:b3:30:32:6a:68:e8:2b:53:24:63:85:87:6c:
cd:41:1d:23:97:6b:ba:6d:60:ff:0d:c9:09:dc:a8:
66:57:c9:c3:16:49:75:98:50:2f:71:2c:86:05:1e:
70:14:99:d5:56:45:c2:21:85:1b:f3:25:90:ab:84:
23:95:03:96:2a:4a:cc:f9:c3:73:ca:6d:89:4c:ed:
42:e2:7b:b4:ef:46:8f:90:6a:12:58:c9:75:46:68:
82:96:da:1c:dc:71:c3:07:e7:63:b1:60:56:c7:4c:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.177.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43014
Signature Algorithm: sha256WithRSAEncryption
80:42:57:39:17:77:28:9f:ba:a2:81:a4:b1:04:51:7e:05:c5:
f9:c3:6b:62:4a:59:8a:9f:ef:c9:20:a9:b1:2d:bc:87:47:81:
ab:b2:ad:6a:34:a2:72:ca:87:3e:6a:e5:07:79:3c:a0:1c:32:
fa:6c:fd:22:46:78:52:83:45:99:9c:0a:62:9d:64:91:63:72:
8c:aa:5c:29:98:af:c2:cf:1c:2a:a8:11:e0:7a:43:bc:33:25:
e8:96:8b:5f:1a:34:d8:f4:c2:04:f7:ca:e0:85:11:c1:f2:af:
0f:ce:4b:69:fe:2b:8b:01:38:1f:48:ac:76:d9:0c:d9:b5:89:
4d:44:f1:9f:6f:bf:98:d1:00:3f:c1:81:b7:0c:3d:6e:45:41:
52:d3:de:e9:4b:e8:a5:95:18:91:84:d4:20:68:a8:6a:5b:bd:
04:53:55:c7:c5:27:2e:1e:a3:70:e1:85:61:f6:ef:f1:03:72:
01:ea:25:e4:c0:08:eb:e5:06:53:c1:2e:3a:fa:a4:2b:7c:1f:
d5:00:8b:fa:30:f6:3f:c1:b8:c0:f6:1d:e5:84:e5:b3:20:9c:
ad:92:4b:ff:78:06:cd:a3:0d:a5:87:27:d4:14:bf:3f:1f:9a:
82:14:e8:f7:e9:2b:2e:d8:20:2b:0e:fc:f1:39:13:a4:01:b5:
32:37:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:42 2024 by rpki-client on console-fra.rpki-client.org