Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer (raw, json)
Hash identifier: ahiTeBdr3Ze5coaxtVrl7LeBZCvapWGKhqvrM3Aygeo=
Subject key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE37708879B357EE27CC972B4AA17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 164.133.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e3:77:08:87:9b:35:7e:e2:7c:c9:72:b4:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=becec531e5c37756b828663f9cc20ad6217713ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:fc:18:e2:21:96:24:6e:87:65:3c:2d:32:
92:1f:09:b3:0c:42:2a:07:6d:7c:a1:6f:db:f1:05:
7e:7f:e9:a7:da:b2:22:6f:f7:71:c8:22:48:e1:8b:
05:68:2e:c6:51:ee:07:ac:ba:6c:c5:ce:75:fd:d2:
a0:be:bb:0f:24:2e:7d:7c:6c:15:05:ea:50:a1:34:
a8:b4:ef:87:fa:19:1b:e6:0f:45:b4:3a:6e:8d:b9:
d3:5a:4e:0e:b8:12:34:30:c8:c7:5b:87:b1:4a:9c:
1b:14:4a:2f:a2:04:c0:f5:a9:94:c3:82:55:21:a6:
c3:7a:cf:a4:e1:10:87:f2:8b:d7:1d:12:fd:29:60:
39:1a:75:a9:bd:ce:e5:58:eb:42:53:42:ec:92:42:
3d:7a:b5:3b:66:7c:97:0f:9a:c9:cb:e9:32:45:da:
0f:46:2e:b3:48:88:a8:7e:cd:2e:99:3a:c5:8f:93:
f4:df:7f:24:66:c0:6c:f0:e0:02:09:70:87:15:4d:
1e:79:15:37:7d:a6:77:66:86:eb:27:3a:cb:1a:3f:
90:a2:39:a2:79:39:e4:a1:30:49:b3:cb:51:52:f9:
6b:41:ef:14:6a:f8:ac:f5:2a:b7:db:42:5b:cb:f4:
e4:8a:de:d7:00:14:1b:29:09:d5:88:64:a1:20:4f:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:a8:89:8f:1f:24:b1:b0:8d:05:3a:00:03:74:fc:32:25:19:
24:28:3e:73:4f:c4:4f:96:d3:e2:27:a1:c3:d5:85:4a:ac:ce:
fa:67:94:ea:22:bf:20:99:56:80:78:dc:01:01:3f:a4:83:89:
52:12:12:03:6a:04:71:b0:2a:13:0b:f8:4f:85:ba:74:0e:d8:
b1:5f:4b:09:29:6a:91:3e:9b:cf:eb:fb:58:61:bf:61:20:f9:
b1:b1:0a:55:03:ba:9e:6c:aa:21:a1:01:e7:b4:41:e5:a8:24:
ea:ed:58:d7:df:fd:ba:7e:ec:82:6a:f7:f2:9d:22:b1:51:38:
ff:0d:76:0e:a0:21:a2:4a:e6:7d:eb:01:a4:2e:5d:58:36:d9:
fa:76:f9:7d:95:ee:cb:43:0e:24:75:8b:e9:ce:13:be:3e:2e:
d6:e1:24:c8:44:2a:3d:ea:81:f3:86:05:d0:80:c6:7d:1d:88:
f8:f9:81:ea:f4:5c:35:36:38:31:7d:4d:62:da:9c:6b:e1:88:
b3:3b:02:c1:45:94:72:3e:fe:86:cb:b2:8e:b9:b5:54:95:7d:
a6:d5:e6:03:ac:c0:eb:86:57:a1:bd:78:22:f4:c5:b1:47:b4:
21:f5:2e:2d:e7:c5:70:f0:15:d5:f7:a2:32:c7:fb:32:4e:05:
c5:19:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:55 2024 by rpki-client on console-ams.rpki-client.org