Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.cer (raw, json)
Hash identifier: r6EtG+eaG3su7DYMkNbLF+hayqX0eeHpU+VYOenLwmM=
Subject key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5012FD5F89704F4E58A47ABB0407E6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207544
IP: 212.6.61.0/24
IP: 2a0b:6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:d5:f8:97:04:f4:e5:8a:47:ab:b0:40:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:0e:21:6c:7f:9e:9f:10:22:5a:bf:9d:26:
f7:35:69:d2:09:04:64:ce:59:ff:c0:fc:5e:fb:45:
65:fe:06:25:0c:fd:fa:95:90:47:39:8b:0e:06:5e:
17:c3:4d:72:4b:4d:b8:00:b6:ea:5e:af:2b:26:df:
98:64:35:88:97:a1:22:98:fd:50:ce:d8:ff:a1:57:
ac:e4:48:17:b2:86:60:6e:86:dd:93:88:fd:ab:bd:
db:7f:0c:9e:50:df:3a:7d:ad:b4:db:b0:7e:a8:01:
e0:b0:cf:49:8d:b8:bd:49:38:1f:11:a6:8f:37:9b:
d9:36:09:11:b2:84:8d:c7:f1:13:29:36:48:a7:84:
4c:64:18:85:28:4f:f1:99:bb:f4:02:a6:ee:f8:a3:
9a:10:a7:75:3b:33:f8:e4:63:95:27:a9:86:a6:89:
76:ef:93:ff:88:69:57:73:8c:54:11:56:a6:7b:f2:
91:7e:7c:75:1b:02:9b:c0:ee:7f:fd:f2:4a:9b:63:
7a:6e:59:17:43:2e:e6:65:e0:73:50:e4:f4:50:30:
d7:f2:80:c2:72:9b:bd:4a:62:91:40:93:08:14:d1:
73:66:01:f7:06:50:40:c6:24:01:4b:d5:e5:29:34:
43:02:94:a8:69:e8:05:0f:c4:67:74:93:5a:0c:32:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.61.0/24
IPv6:
2a0b:6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207544
Signature Algorithm: sha256WithRSAEncryption
ab:e2:b6:9b:14:56:b4:b1:c9:cd:37:89:41:13:38:99:4d:a9:
e4:ab:eb:a1:44:40:d6:12:69:f6:67:ed:00:f3:c3:ec:d4:ed:
81:38:f5:3e:1b:e4:86:cd:70:c7:98:86:4d:78:a0:44:79:e1:
ce:5e:46:06:71:dc:1b:56:0e:71:bf:ab:87:77:0f:ff:f3:c7:
44:24:56:5c:70:a1:cb:ca:d3:60:a5:98:a3:d2:da:2c:74:e4:
8c:7a:19:9a:8c:22:e0:47:62:c3:f5:78:78:a9:53:45:55:e8:
ef:be:42:2a:b1:be:a3:68:bf:21:27:6c:81:c5:c9:69:23:8c:
5f:15:3c:1f:f7:01:f1:94:bb:68:28:53:b2:1c:8b:52:e1:f2:
37:03:a2:ce:b8:9f:86:48:ff:de:1e:8b:66:91:7e:e7:fd:52:
72:1b:ad:be:23:f3:e6:7c:03:55:25:78:e5:05:73:2e:55:6f:
ee:e2:26:d7:f4:c2:8a:74:ad:58:ab:db:59:87:6f:fa:ed:ba:
a0:ab:05:d1:7f:7c:65:9f:58:a3:6d:87:7f:eb:9c:46:af:40:
cc:a1:96:ba:92:4a:10:d6:b6:f5:30:5e:29:dc:08:f8:07:97:
86:3a:80:67:1f:7d:0b:c3:af:e5:12:67:37:78:b8:c2:fe:63:
6d:27:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 08:50:07 2024 by rpki-client on console-fra.rpki-client.org