Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer (raw, json)
Hash identifier: g28mMpSbt5/7VNI1cv7RJdodgilj/jIx/hkVOFLSlBw=
Subject key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99844A3BAC44E2C5341F83D61C0963
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 129.70.0.0/16
IP: 192.109.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:84:4a:3b:ac:44:e2:c5:34:1f:83:d6:1c:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:ca:82:d0:01:5c:6a:67:f8:4f:df:19:15:
14:42:0c:ef:94:7d:da:bb:23:8b:89:4c:15:16:59:
e2:af:cb:2b:25:10:ff:0d:70:8a:2d:55:7c:91:aa:
90:e5:0d:56:63:7d:bd:bb:10:db:5c:c4:e0:45:07:
0d:5b:a8:10:82:7c:d0:65:ad:49:05:a7:9e:23:63:
39:f8:7f:f2:28:ae:17:de:47:33:c7:77:b4:7b:77:
b7:f5:96:01:60:83:77:d0:3c:64:88:51:be:d7:36:
32:45:3d:4a:78:1f:06:37:36:e5:de:c4:0c:02:84:
07:65:f2:ce:47:2f:c0:98:78:33:82:b7:11:c1:90:
77:ce:8f:f8:dd:6c:73:68:f2:d7:0a:f2:0d:5a:58:
70:1c:ee:8d:5a:68:1b:23:52:42:c2:7b:c6:3c:8c:
9b:6d:5a:35:11:8a:a3:4d:eb:58:9f:39:7f:4c:25:
8b:b8:24:5c:b5:aa:09:3f:80:a5:fd:fb:75:a2:bd:
82:88:14:69:fe:05:2e:94:15:5b:f3:6a:25:43:0e:
ff:e5:2f:44:a4:8f:1b:30:8e:77:02:06:99:81:40:
de:8e:57:89:6c:95:0c:51:39:1f:70:9e:26:bc:d5:
41:18:34:1d:af:55:7e:4a:7d:b1:bc:38:0a:42:ed:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.70.0.0/16
192.109.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7a:9f:bc:01:bc:4d:93:98:7c:bf:52:98:a5:77:1d:f0:ce:
65:5b:d9:4d:f7:c9:a7:50:68:85:4f:75:3a:c6:af:29:da:b2:
1a:06:1a:b3:0e:59:46:df:80:ee:b7:e8:e2:e3:fe:4b:49:96:
c8:b0:9c:00:24:7b:4e:bc:34:6f:02:fb:1b:a8:ec:2a:ab:cb:
14:99:9f:b5:95:75:1a:51:e0:0e:7c:dc:32:e0:80:dd:8f:9a:
94:08:e0:8f:62:54:34:e7:ef:ef:96:3f:05:4b:28:05:6d:0c:
5f:fb:f2:3d:fe:40:34:ec:ec:9b:ad:1a:4a:96:fe:7a:98:f5:
1b:7e:96:02:6c:60:20:d0:f5:2c:d8:72:99:d0:fe:7a:5f:f2:
e0:2f:3d:7c:43:60:63:16:dd:2c:2b:67:17:cd:9b:84:bd:61:
d4:c2:f3:73:7b:40:6c:75:eb:25:fe:34:06:98:b6:d3:e7:bb:
2d:56:6a:75:99:ee:20:7c:b6:86:ce:2e:59:6b:98:f5:01:20:
44:ce:12:72:12:e4:3c:63:7f:b8:77:3c:48:f9:d6:26:c1:92:
fc:d4:7e:49:03:e5:ec:d5:e7:32:2a:01:14:84:ad:4b:b6:61:
62:11:a8:f7:45:76:76:b7:6c:0e:1e:bd:30:bd:c5:dc:d6:7f:
f2:67:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:19:19 2024 by rpki-client on console-ams.rpki-client.org