Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
File: vx1f6v05F0clv-S--RvSfHsvb5E.cer (raw, json)
Hash identifier: tsBoEpc8+CEvD/mOBVP+WrZCKoVv6tbpkOeWmqcGol0=
Subject key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3492F80F84BA8B7CFE369E24D4D7078
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.31.6.0/24
IP: 193.31.15.0/24
IP: 193.31.60.0/24
IP: 193.31.62.0/24
IP: 2a0f:96c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2f:80:f8:4b:a8:b7:cf:e3:69:e2:4d:4d:70:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:9e:b6:88:89:25:03:6f:44:35:af:db:4e:
ee:5d:06:48:c0:2c:2e:5d:f1:5c:f5:0f:a6:b8:1b:
8f:95:ce:49:fb:e1:25:3c:02:5f:95:fd:0d:ab:5f:
6d:b3:8f:e6:3c:86:ab:6d:8d:dd:5b:04:fa:f2:fe:
d2:b0:0b:70:ee:46:28:4a:68:db:09:a1:ee:e0:6e:
0f:62:4f:db:00:02:b8:a1:df:2e:c4:52:d6:98:73:
34:c9:e4:29:43:c3:f4:8f:bf:e8:63:15:8e:2e:df:
a1:c1:86:2e:92:21:87:5f:cf:1e:79:2d:46:67:3e:
63:4c:ca:9d:68:b6:3c:c4:77:33:de:27:e0:05:a6:
18:11:5d:39:a6:f8:14:50:b2:32:55:73:3e:c1:b6:
75:ef:e8:d4:5f:29:d2:12:85:25:b0:07:c9:42:3d:
18:3b:16:1b:58:c6:9e:3c:ee:79:2d:e3:20:99:93:
8e:90:9e:02:4e:f5:56:ff:67:62:2d:5e:04:2b:5d:
49:e4:81:58:21:26:b8:e7:15:0b:55:5c:c8:4a:70:
32:3c:06:d8:f0:7f:5a:ad:d3:a7:e7:6f:30:c0:bd:
2d:62:72:6f:12:7b:7b:a9:17:b4:84:45:42:de:5c:
6f:17:72:bf:bb:96:54:b4:4a:0a:68:97:62:d4:10:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.6.0/24
193.31.15.0/24
193.31.60.0/24
193.31.62.0/24
IPv6:
2a0f:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:df:b6:01:ee:e8:91:1a:71:99:7f:97:4e:c1:c1:03:16:95:
c2:e3:c5:30:9d:26:ef:2d:05:42:90:37:4c:7f:88:94:ac:41:
55:41:4d:64:60:92:68:4b:2e:c0:92:92:34:a0:5c:c1:23:82:
14:43:79:0f:f5:ce:46:3e:fc:97:aa:7a:45:56:8c:db:f8:09:
33:b9:be:2c:b8:b9:2e:25:bd:d8:19:06:36:78:ef:77:39:f4:
b4:57:f2:0c:76:ac:45:51:6a:c6:1c:d9:91:e9:ca:41:4b:eb:
d9:a8:22:8a:48:76:d6:01:e2:35:56:81:d1:e1:52:52:da:82:
01:a1:68:0c:d4:31:f1:30:8e:14:ab:09:45:1c:f0:3d:df:22:
74:21:4b:bc:c6:23:0c:96:2c:c5:36:c1:3d:16:69:94:3b:44:
fd:2e:57:7e:c0:89:7f:7a:5f:f9:f6:95:3b:cc:a6:59:8c:8c:
ec:89:86:ed:bd:3e:7d:2d:36:fd:fe:57:77:d7:ec:00:0d:f4:
c1:50:e8:f2:80:35:20:25:04:c0:c3:23:ee:0f:09:57:cd:bb:
cc:ce:ad:c8:e4:60:53:f6:58:65:a4:e1:df:92:a4:62:85:c5:
8c:79:97:85:20:7f:d4:fd:27:7c:1d:8e:5a:64:e3:9b:11:0c:
90:ce:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:25 2024 by rpki-client on console-ams.rpki-client.org