Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
File: 28FEzhVO7p27NWLOTNMigzhkEzM.cer (raw, json)
Hash identifier: paPSVPUzXLk+tW70aTVwik0MjHxipLXouZTv3366F2c=
Subject key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8A31994C70FABBB26E0CEAEF5C031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42853
IP: 185.25.244.0/22
IP: 2a00:8420::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a3:19:94:c7:0f:ab:bb:26:e0:ce:ae:f5:c0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:02:74:83:20:c2:40:68:ee:29:33:eb:cd:
12:65:08:5c:dc:10:88:7d:13:73:1a:e8:69:b4:9f:
ed:b7:92:bc:2c:10:de:37:1e:7e:f6:16:8c:22:00:
28:5a:29:e8:eb:36:bc:15:9c:1d:fd:dc:b5:6e:89:
c1:35:7a:6d:17:5d:a4:65:bc:48:1a:fe:cd:6b:03:
45:ba:0d:bd:8f:ee:85:e1:23:5e:b4:58:10:15:37:
2b:96:93:85:78:cb:06:45:a7:35:08:67:42:24:0e:
5f:0c:41:1b:52:d6:ad:5d:27:60:2a:5d:55:40:71:
54:62:ce:78:f2:a4:13:aa:fc:c6:0c:63:fa:5b:db:
39:f6:20:be:fb:22:d1:bf:c6:13:3e:f1:93:3a:d3:
c4:6e:7b:c0:05:38:bd:89:2c:3d:9e:bf:cb:f8:61:
f4:26:55:63:7e:9e:49:36:52:30:d2:4a:24:53:85:
40:34:ad:e5:34:00:3a:a8:ca:5d:30:8a:6c:1e:1c:
62:f6:14:db:50:d6:1c:65:1c:5f:d5:69:3f:52:a2:
13:b8:b4:3e:a4:83:32:ff:da:a9:fa:07:f5:ff:4b:
4d:c4:4f:4b:45:10:42:6a:82:a9:d7:47:f8:83:41:
c6:a1:87:7a:80:1f:8c:b8:77:db:eb:fb:b3:a3:45:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.244.0/22
IPv6:
2a00:8420::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42853
Signature Algorithm: sha256WithRSAEncryption
40:a9:09:6a:f2:ed:76:23:ce:0c:23:14:f4:66:a3:88:48:b9:
b4:50:92:f5:a9:88:53:99:79:0d:13:f5:67:4a:8f:ee:3d:eb:
bd:66:fe:f8:44:eb:12:7d:32:fd:d2:4f:92:03:79:6b:4a:e6:
a0:08:62:e8:f1:64:44:6b:49:1b:2f:24:28:30:20:76:29:24:
5a:c9:64:4c:52:b6:49:87:27:ee:3e:fd:17:00:29:2d:bb:36:
38:7b:44:ab:5a:70:d6:d2:87:f8:c6:7b:ee:a4:a3:39:81:69:
86:29:3a:91:92:a4:be:62:bd:ca:8e:8c:0a:0a:5f:ee:93:4a:
a4:3d:18:cd:38:bb:45:ce:57:b1:a5:eb:8a:db:58:87:48:f9:
0f:2c:eb:95:08:f0:4c:1e:48:87:74:70:20:81:ec:6f:43:cc:
b5:38:0b:32:a3:54:e2:fc:c5:9d:59:6c:62:7b:51:65:b8:07:
c8:bd:10:3b:f9:50:ba:c6:fe:a6:93:94:15:29:e6:4c:4b:57:
c0:a5:87:f5:88:17:c1:b2:39:4d:c6:22:67:a2:51:2a:78:d0:
43:d3:b6:6a:55:3a:11:d4:7d:1f:4b:46:80:c7:4c:b7:99:ba:
d9:7a:42:55:cb:cf:29:97:07:f5:58:f0:ad:a8:1a:42:96:5c:
76:bf:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:20:19 2024 by rpki-client on console-fra.rpki-client.org