Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
File: I7oexPA1py36OekwrY7FQ2jrevQ.cer (raw, json)
Hash identifier: kbQbKchU8g5m6SkfEJH58ma3/BkGYcAMXXsRd/U17bY=
Subject key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC833DC2EE5FD506612D4DA0DB477B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29576
IP: 93.157.24.0/21
IP: 194.146.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:83:3d:c2:ee:5f:d5:06:61:2d:4d:a0:db:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:e8:2b:b3:d3:e2:74:34:6f:bf:20:71:ea:
74:6d:bd:16:9d:7b:82:41:8d:a1:15:2f:cf:ae:af:
49:8a:9e:ea:58:3b:fd:34:68:a3:e5:fa:a6:cc:e3:
97:e1:f2:5b:b3:7b:b6:cf:49:11:07:c7:17:c9:21:
87:15:e1:8f:84:69:7b:91:4d:13:3c:f7:64:85:30:
d6:45:ef:e3:9d:d0:d2:f1:13:6d:e4:26:d1:83:18:
a2:72:ea:d6:6a:d9:28:9e:0f:c3:83:5e:da:13:7e:
73:26:3f:81:82:2b:2b:38:3e:e9:79:fe:a4:f3:f8:
b6:d2:e6:69:87:8a:6a:80:b8:7a:49:f4:d5:39:a5:
c3:94:5e:21:46:0d:1c:db:d0:d4:ba:90:e5:4c:e7:
ff:09:bb:f7:a8:cf:d9:d7:c7:4b:e9:86:d9:07:37:
9a:09:83:21:86:9b:3d:12:7b:b9:05:37:4e:5f:08:
60:5f:2c:c5:11:70:0e:22:af:33:56:20:87:38:fc:
28:43:bb:08:d7:ab:2c:9f:89:79:78:54:a2:fd:a9:
9e:6d:c4:a0:c5:73:12:f8:3b:bf:d0:c8:7c:b9:da:
26:88:20:b1:df:f5:2f:6d:4e:2f:57:2b:83:aa:af:
03:0b:f3:c5:b3:7b:99:7e:fb:7d:9d:0f:c0:d2:67:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
194.146.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29576
Signature Algorithm: sha256WithRSAEncryption
15:7c:79:ac:45:e3:8f:48:d0:a9:34:29:43:ff:82:2b:89:12:
e6:7e:03:8f:5e:76:85:16:29:17:b3:2d:2b:88:52:91:80:8e:
ff:17:02:c8:6e:62:95:50:5d:b7:53:f7:1e:30:86:cd:ff:8a:
c2:3e:57:22:9a:97:d2:57:da:13:f3:d5:ac:bf:48:ce:c3:7a:
24:c8:2f:20:62:2e:bd:1b:95:d5:af:c1:ec:48:e6:ea:93:b5:
a9:31:1e:2e:b3:2a:67:24:a2:c9:16:c1:3a:64:65:c9:a3:e0:
c9:c2:a5:36:64:61:51:24:22:70:38:3a:2a:a6:96:75:1b:60:
4b:85:fa:8c:3b:d9:6d:eb:53:6c:c8:8a:a4:dd:1d:ff:1a:3b:
87:95:51:4c:f8:a6:bd:83:87:07:11:f1:d7:e0:82:f6:39:89:
03:14:b7:2f:ba:b6:4a:96:e6:6a:a7:f3:69:7e:6f:79:d4:f0:
f2:1d:92:11:ba:b4:cc:67:99:f6:00:58:78:d7:0e:e4:e6:c7:
bb:97:b7:f0:d3:e2:55:36:d2:d3:50:59:d5:d3:a8:da:dd:8e:
65:2c:a7:86:29:f4:4f:61:d6:7f:5e:2e:8e:9b:f8:2c:bb:45:
07:bd:9b:dc:91:25:04:0a:98:ec:73:76:14:83:2f:74:31:0c:
56:23:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:37:20 2024 by rpki-client on console-ams.rpki-client.org