Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.cer (raw, json)
Hash identifier: e+J7jvrHtms/2YJ0a7SXpTJ/uKQSUMaU6N8/qJZNHzo=
Subject key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8D87AB0E93238651311C72202E02F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.78.208.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d8:7a:b0:e9:32:38:65:13:11:c7:22:02:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:19:ce:0e:1c:75:b0:0e:3c:86:3e:3b:06:
6e:81:48:2e:2e:ca:77:51:66:c6:eb:b6:b0:f0:29:
ea:50:fb:e9:d3:d1:0e:8d:f6:13:f4:71:37:45:36:
d9:ce:7e:49:81:5b:95:73:0c:ca:26:79:4f:56:d7:
5c:2b:63:16:05:5e:00:45:e1:a7:24:d9:77:ac:d0:
aa:75:0f:73:7d:2b:97:e9:64:82:59:cd:05:54:49:
d5:a6:a1:29:97:55:d5:8f:ba:b9:07:02:fd:e5:0d:
b1:73:45:a6:f5:22:00:18:14:ef:30:1c:fa:e4:fb:
bf:e4:71:90:0f:84:e1:23:b5:3f:d7:13:a9:15:47:
90:93:9a:6a:c5:0d:3c:6d:3e:e6:12:84:b9:f9:19:
70:36:2e:da:ec:8b:41:e1:ed:45:5a:e0:51:a9:96:
05:93:49:f5:57:f1:1a:a1:16:d4:92:9c:1e:fd:f1:
52:50:12:20:ce:c3:51:d4:69:60:8f:e2:44:3e:d8:
2a:d8:b5:49:c6:54:a5:df:a2:14:56:6b:ca:2c:80:
43:d5:c5:dd:ff:fe:9e:45:7e:01:61:fb:33:a3:d0:
09:51:38:8e:18:85:b3:95:bc:ac:5e:47:d1:62:e4:
7e:b5:86:a7:93:d7:84:3f:be:fa:9d:d7:35:0d:f1:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0a:41:1a:a1:6b:e9:86:03:a4:22:cb:a9:ac:13:37:6f:13:
06:6f:08:72:e6:2d:4e:40:74:9f:72:0c:c1:d6:cd:c1:6b:47:
64:43:e8:6b:f4:4a:98:1e:bc:28:10:aa:ba:16:65:0f:83:68:
df:63:d4:ea:4d:2e:be:54:ad:5e:25:fc:c4:b7:c2:fd:6d:5e:
1a:6d:88:c4:00:5b:5b:65:df:14:dc:16:97:de:a6:f7:a9:50:
41:ce:5c:39:bf:07:04:f1:cb:4a:61:75:6f:c4:1b:33:1e:96:
6d:94:bb:35:b7:61:5c:c6:31:b5:fc:1c:14:94:e5:7e:0b:22:
3d:03:31:90:c4:1e:07:4e:21:46:c1:ec:e5:58:a0:32:bb:c6:
82:e9:e1:6c:24:11:f1:d2:52:0c:5d:4d:53:87:23:17:21:02:
8c:72:8c:7d:6a:b4:eb:3b:86:a4:6e:a8:34:f3:fc:b5:d8:8f:
d9:86:0c:e4:ef:28:dd:60:f2:70:7a:5c:c3:04:7b:4e:ac:30:
d8:71:90:b5:f4:c6:37:25:0a:f9:f0:c8:c6:77:db:10:42:a6:
a6:2d:7c:99:a4:eb:36:04:14:02:06:b9:c6:cd:7e:76:83:cf:
ce:9d:3b:1e:b9:e6:4e:94:cf:d7:89:23:32:64:4d:5d:8e:61:
c9:6a:5d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:15 2025 by rpki-client