Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer (raw, json)
Hash identifier: NbDCZwailJlInBvLDwVLLat5zFay/pETxJY2B9hISag=
Subject key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5090AC4C11B8CAC49777DC437948
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204904
IP: 185.236.88.0/22
IP: 2a0d:a700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:50:90:ac:4c:11:b8:ca:c4:97:77:dc:43:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:49:cb:c1:71:1d:87:4a:48:3d:5c:45:e4:
03:6f:b3:01:f9:f4:41:1c:c7:75:a4:36:8c:15:2f:
e3:60:5e:9e:a9:a8:84:4d:42:27:25:77:86:4e:dc:
94:1c:7d:b8:82:9b:20:4c:99:05:93:60:bd:7c:d2:
70:80:9c:c0:a0:eb:f1:5a:c8:9e:11:31:ae:49:5d:
8d:72:f9:d6:ed:78:01:e7:82:4b:5e:df:1f:22:bc:
6d:99:ce:e1:db:1f:52:27:e6:aa:b2:c4:73:f5:22:
1c:88:f4:94:4e:45:dd:67:c5:42:3c:d8:cb:a2:df:
36:47:8a:19:39:dc:a7:e9:70:b1:32:fd:47:56:7b:
85:70:9c:63:1b:3a:ab:0c:a8:d0:98:b7:ab:b5:55:
17:05:42:ee:38:1e:99:26:32:c3:ed:7b:00:3c:c1:
c1:3e:30:3f:7b:a4:81:9c:8c:ad:29:7d:1e:4d:0e:
bb:f3:a7:92:ee:3d:98:2c:fd:59:84:ff:3a:78:b4:
8c:5e:24:85:1d:5d:93:f5:98:8a:2c:a0:18:12:b2:
e6:f3:99:ea:b9:d4:8a:0e:01:a2:89:05:fe:21:6a:
43:72:70:7f:71:44:d8:f8:4d:c3:eb:1d:ad:be:44:
02:cd:f4:04:c3:31:42:52:11:e4:a9:5f:b6:44:4d:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.88.0/22
IPv6:
2a0d:a700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204904
Signature Algorithm: sha256WithRSAEncryption
7a:44:6e:eb:4e:8e:7c:31:f8:cf:66:04:37:e4:ef:bb:58:72:
a4:c3:e2:74:35:db:bd:b6:7a:18:2c:07:cf:7d:8d:52:00:54:
2b:0c:93:fb:d5:90:4a:41:ee:ae:8e:84:54:e4:fc:79:ba:44:
6e:cf:2c:e9:36:af:03:6c:7b:18:d0:37:4f:0e:db:70:4e:a5:
4b:22:4d:d8:33:4a:e1:9d:39:da:cf:91:df:6e:fb:a2:ab:90:
31:4d:93:c5:31:04:db:85:b7:39:54:d8:d7:7e:f4:3f:97:96:
c7:db:d3:ab:7a:40:33:f7:26:b6:77:29:96:89:b4:71:bd:cf:
c8:d0:c0:b1:d6:73:c9:ba:ec:09:d6:15:5b:59:1c:7b:23:fe:
2c:a3:24:71:4f:71:20:1c:99:c7:ca:38:ac:79:c0:09:79:24:
1f:b0:d4:20:67:48:fa:92:d5:40:15:10:bd:df:27:a6:8d:5c:
eb:39:ec:c7:99:2c:ff:a8:e6:d1:1c:98:d0:92:d4:8c:d7:62:
1c:13:cc:53:75:32:b1:68:e2:e5:c2:06:b5:b2:e3:53:c8:ed:
f7:66:5e:0b:bf:10:8a:b5:56:81:67:c0:05:00:9f:2b:3e:1a:
ff:2d:2d:14:fb:25:ca:65:24:4f:4b:a9:b4:6d:31:b0:80:c6:
9f:ec:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:55:33 2024 by rpki-client on console-fra.rpki-client.org