Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
File: EYuk75AarBCHbM-Xal99FsTKefA.cer (raw, json)
Hash identifier: Bd16XfwdrjLFiOWGjsOWfS6wi2KSczbrq+dey37kyIc=
Subject key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8019B27C641B61AAF78606DB41BF07B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.9.188.0/22
IP: 2a03:5640::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:9b:27:c6:41:b6:1a:af:78:60:6d:b4:1b:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:f6:d7:74:14:74:c9:08:c4:d8:64:46:28:
6d:72:55:60:4b:cb:55:be:92:f9:68:6c:b1:ff:6f:
02:f1:bd:ea:fe:55:72:e8:6d:b5:73:11:30:7f:6e:
6b:ee:43:d1:bf:0f:45:34:53:8c:1b:44:12:1a:13:
12:74:b0:51:de:5a:35:68:ed:fa:a9:25:5a:60:c7:
19:dd:40:4e:9f:08:99:a3:7d:d1:ae:31:e2:c1:07:
0b:75:25:ea:8c:6a:7e:95:04:c5:8e:a6:63:58:42:
6d:06:4f:dd:b1:97:a6:03:c5:d3:06:20:a9:9c:70:
3e:35:a8:86:5b:8b:e8:2b:c6:1f:66:30:16:c9:c5:
4d:fb:cb:be:8d:e8:33:d4:65:22:4c:65:9a:d8:45:
72:20:be:ad:f5:67:08:25:ac:8f:7d:78:94:da:d3:
38:0b:56:95:68:d5:44:6e:9a:2b:08:9a:b6:ed:ce:
15:27:bc:2b:7d:d1:e7:9b:7d:2a:6d:21:a7:a4:21:
ca:51:46:c3:5f:d5:44:ae:65:f4:b2:fc:e4:b8:4e:
96:3f:c0:7a:f5:3f:af:02:79:ee:ec:2e:04:2c:7b:
35:33:39:c7:cf:4a:4f:f2:bd:99:46:75:b1:08:70:
f6:26:3f:f7:53:da:73:98:57:87:b9:29:c4:30:f7:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.188.0/22
IPv6:
2a03:5640::/32
Signature Algorithm: sha256WithRSAEncryption
8d:f4:b6:a9:30:83:27:dd:df:ea:98:0f:92:23:51:47:2f:2f:
92:89:b7:e9:94:d6:d8:62:60:a4:fc:1a:97:bb:72:74:9b:55:
b8:6e:fe:e8:1d:0e:75:6c:10:b6:ab:36:91:ea:6f:2e:20:a4:
99:2e:59:9b:ee:ce:0a:5d:e8:e3:2b:96:99:d2:e6:8a:a5:6b:
ea:cd:51:c8:c5:0e:fd:13:25:60:9b:78:b7:f6:60:ce:f2:da:
06:17:04:12:f9:7b:f7:a3:41:d4:18:56:bc:94:a9:4d:36:cb:
7a:63:30:96:88:56:58:a2:4c:94:2c:75:bb:13:21:7f:af:d7:
32:94:8b:4c:9a:3a:91:5f:5b:2f:2c:cb:9f:dd:23:fd:27:37:
97:75:69:02:7a:e7:ed:90:74:0d:dc:02:4c:c7:54:b8:df:40:
71:20:db:aa:17:5b:a3:12:8a:93:53:b4:26:aa:3d:4e:ec:d2:
7f:6c:51:99:8f:5f:94:d0:64:0c:44:5d:b2:0f:f5:d8:5b:7d:
ce:9d:40:26:87:8b:22:4c:3f:4a:04:0d:bc:ae:a4:ff:99:1b:
0b:0b:2b:79:03:c9:61:20:91:f6:29:38:6f:52:a8:82:cf:7b:
47:28:ee:81:40:e3:52:2c:81:99:5d:53:13:19:0b:47:fa:8a:
78:97:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:01:53 2024 by rpki-client on console-ams.rpki-client.org