Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
File: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer (raw, json)
Hash identifier: JeEBX+t9fitVzWWWTIQhGxC1M/XdI9ZHBwadLO6KeUQ=
Subject key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B77BC047CC070FEDB636ECFF89B97F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8523
IP: 80.76.144.0/20
IP: 164.40.176.0/21
IP: 2a00:1d28::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7b:c0:47:cc:07:0f:ed:b6:36:ec:ff:89:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea827b9556d540da536b8046c65ff95b06ee4963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:15:60:cb:25:16:ac:ed:26:5a:f3:1f:f7:
5d:60:6c:50:a2:aa:6f:24:71:88:f9:ef:a2:08:bc:
af:68:67:07:f4:a0:93:18:ce:26:b0:5b:cc:98:55:
6a:73:c4:5c:a7:6d:71:a3:46:40:58:43:71:b3:be:
2e:90:05:dc:2d:d0:c3:47:df:28:0b:86:5f:28:c1:
57:74:c4:7e:79:85:9e:ef:52:0a:47:f1:33:ca:3e:
4f:8d:ba:9f:7a:62:a8:19:79:87:db:f1:56:df:c9:
3b:3f:3c:d6:8b:19:36:ed:4f:f6:50:e3:af:e9:ac:
42:cb:5a:15:83:df:bb:9a:bf:48:d9:54:ce:00:0b:
7b:e0:d2:55:9f:6e:d9:28:d9:a4:f4:60:00:da:ff:
97:c8:fc:99:c9:fe:12:f3:6d:9b:d3:45:3d:d2:d1:
a8:4d:16:3f:9a:55:1c:0c:a2:ab:96:42:95:a3:08:
b1:57:8b:6e:90:39:7b:3e:92:64:5b:16:0c:88:5e:
d6:43:63:b1:29:f3:e8:f5:06:57:e5:06:42:66:71:
a7:a9:99:15:2f:14:3f:36:d7:55:ea:6a:59:5e:06:
b6:fe:35:94:9e:16:66:68:50:02:4f:f3:5c:2b:7f:
b1:cf:dc:55:72:34:30:d7:5b:c6:15:55:2d:1c:83:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.144.0/20
164.40.176.0/21
IPv6:
2a00:1d28::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8523
Signature Algorithm: sha256WithRSAEncryption
b0:36:d7:27:42:23:9b:b9:99:e0:de:04:cf:46:5f:56:bc:f1:
f7:d3:61:c4:7a:8b:b5:58:90:52:9e:d8:bb:34:aa:2b:59:7b:
e2:e2:f8:8c:b2:14:42:48:3b:79:cc:b1:7a:5d:ba:5d:f3:26:
97:00:5a:58:ae:92:dc:05:9a:a1:81:e4:98:d3:73:e1:c0:08:
30:15:4f:7e:07:87:21:43:85:14:17:6e:aa:97:ab:ad:ec:64:
6a:55:91:f6:d7:65:e6:3a:3c:b5:45:fb:37:ea:1a:07:10:a8:
03:21:4e:ac:65:38:29:80:a7:74:41:60:03:b6:b1:89:6a:26:
1c:58:e1:aa:e9:df:0e:1c:a6:ec:54:f7:88:06:a0:9e:0a:1e:
ed:b9:c1:7b:d0:eb:fe:0f:b1:40:f5:f9:ab:5f:a8:b8:d0:17:
2e:af:a8:b2:09:91:d1:c0:23:a1:df:3f:ef:6b:9f:a6:c2:b4:
77:9a:b9:a2:f0:02:d7:27:75:87:81:d1:cc:15:ed:89:c2:ae:
ac:ae:a5:ac:f3:29:f2:a2:1b:1d:57:97:38:fd:2c:c1:40:b0:
2f:71:75:ac:32:ef:0e:cd:1c:b5:67:0a:e2:f0:57:48:fb:69:
d4:f7:9f:be:ed:a0:c4:e9:dd:4b:e9:70:c0:66:4e:d4:71:b4:
64:45:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:01:56 2024 by rpki-client on console-fra.rpki-client.org