Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.cer (raw, json)
Hash identifier: 3buEKC5pwGTUfIn1tvlb8HpeSvMhJsWoocB2KKww72o=
Subject key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72735F4B2A97EA9856DD02EA27E0979
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.78.208.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:35:f4:b2:a9:7e:a9:85:6d:d0:2e:a2:7e:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:19:ce:0e:1c:75:b0:0e:3c:86:3e:3b:06:
6e:81:48:2e:2e:ca:77:51:66:c6:eb:b6:b0:f0:29:
ea:50:fb:e9:d3:d1:0e:8d:f6:13:f4:71:37:45:36:
d9:ce:7e:49:81:5b:95:73:0c:ca:26:79:4f:56:d7:
5c:2b:63:16:05:5e:00:45:e1:a7:24:d9:77:ac:d0:
aa:75:0f:73:7d:2b:97:e9:64:82:59:cd:05:54:49:
d5:a6:a1:29:97:55:d5:8f:ba:b9:07:02:fd:e5:0d:
b1:73:45:a6:f5:22:00:18:14:ef:30:1c:fa:e4:fb:
bf:e4:71:90:0f:84:e1:23:b5:3f:d7:13:a9:15:47:
90:93:9a:6a:c5:0d:3c:6d:3e:e6:12:84:b9:f9:19:
70:36:2e:da:ec:8b:41:e1:ed:45:5a:e0:51:a9:96:
05:93:49:f5:57:f1:1a:a1:16:d4:92:9c:1e:fd:f1:
52:50:12:20:ce:c3:51:d4:69:60:8f:e2:44:3e:d8:
2a:d8:b5:49:c6:54:a5:df:a2:14:56:6b:ca:2c:80:
43:d5:c5:dd:ff:fe:9e:45:7e:01:61:fb:33:a3:d0:
09:51:38:8e:18:85:b3:95:bc:ac:5e:47:d1:62:e4:
7e:b5:86:a7:93:d7:84:3f:be:fa:9d:d7:35:0d:f1:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.208.0/22
Signature Algorithm: sha256WithRSAEncryption
02:26:cb:da:61:ec:f9:ad:d4:5c:a2:c7:48:58:3e:dd:de:cf:
1d:a5:e3:e7:09:56:a5:0c:34:ec:a0:cc:9b:7f:44:b2:4e:72:
f1:91:08:54:b3:44:51:56:d5:17:50:9e:66:20:ec:4d:c7:fb:
c4:b3:3c:a2:19:5f:9b:4b:c3:cd:80:d1:4f:ed:25:cc:70:19:
f1:45:38:5b:05:d5:03:e3:09:37:d0:87:b7:e0:4c:36:66:c7:
63:a3:4f:b2:72:b7:04:a6:d2:e3:be:22:a2:ac:b9:fa:69:b4:
e8:fc:5f:f7:72:7d:a6:8a:20:43:7f:3d:92:9e:95:a6:06:ce:
83:d0:fb:d7:a5:74:3d:fc:0e:da:d8:91:ed:1b:13:7c:e5:0a:
79:1c:2f:e4:d6:3c:f7:90:d0:1a:e5:4c:35:30:4f:c5:7e:84:
e5:8a:f4:d3:24:6c:98:ea:bc:d7:03:34:65:e7:23:fe:53:84:
c2:1c:05:4f:c6:34:48:37:fb:04:17:c6:90:6d:32:1c:6c:ea:
56:cf:6b:59:47:42:a1:d8:83:36:e8:63:1d:39:ec:b8:e0:da:
97:09:fa:57:e4:41:fb:52:da:b3:f2:12:18:d3:60:aa:1d:be:
e8:d9:54:bd:f6:73:54:e0:89:c4:11:fb:23:94:ce:90:f4:e3:
d9:86:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:18:50 2024 by rpki-client on console-ams.rpki-client.org