Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
File: 1-10-EU-84s8PkgQxxWp8c9_aWn4.cer (raw, json)
Hash identifier: dsOPgHUgGAGR4Aj/LYUuhWE+cTIB/Z9IsKAoUc/W01Y=
Subject key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EE185CFFC66462708B2D7C0C15259F41F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Apr 2024 11:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57032
IP: 2.57.239.0/24
IP: 185.119.192.0/22
IP: 2a12:9bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:85:cf:fc:66:46:27:08:b2:d7:c0:c1:52:59:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 11:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:56:50:81:67:b5:3c:08:aa:f5:87:16:95:
c5:a3:d9:8d:97:5c:bf:6e:7a:8c:70:a3:2d:4b:a8:
ba:c7:83:0a:28:1c:da:4a:24:f5:14:69:9e:f2:3e:
65:a4:81:89:cd:19:93:d9:20:a9:02:33:83:46:b1:
10:d1:31:95:08:ce:da:4f:14:fc:75:49:43:0c:14:
5e:dd:6b:be:97:d2:28:ab:ac:07:40:09:eb:c9:a5:
0f:43:c0:6e:84:1d:06:9c:57:8f:1e:d8:21:37:a6:
02:df:7f:9a:59:ee:1c:e6:ef:45:d6:f3:2b:3c:e7:
e3:64:60:82:99:88:65:e8:fa:81:67:5f:a0:c4:25:
71:ea:be:7f:82:0a:ec:ed:3e:64:7a:19:08:b3:7b:
c2:02:54:7f:5a:28:89:83:3c:23:b3:a9:27:09:1e:
77:e2:d5:a8:2c:56:c3:00:c5:33:4e:06:17:84:c1:
c5:71:b5:5a:1b:7b:12:71:ae:fd:91:55:fd:2c:5f:
98:d5:41:37:d0:89:04:29:d8:81:cf:40:6c:d9:d4:
09:c9:f8:0e:51:45:e7:7a:34:2e:bd:02:80:02:72:
d4:0e:48:d3:0b:76:c9:68:c0:6d:fa:87:7a:3a:17:
17:ed:00:4b:11:3e:db:4b:a9:f6:13:fd:e5:39:e8:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.239.0/24
185.119.192.0/22
IPv6:
2a12:9bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57032
Signature Algorithm: sha256WithRSAEncryption
93:ce:c4:1c:9c:5b:f3:1d:d8:47:f9:89:82:71:bf:e0:d9:b5:
24:63:ca:2f:e4:a6:a6:bc:5d:86:30:75:33:a5:56:1a:ac:51:
d7:d7:7b:6f:a5:b1:e0:d1:e7:8b:1a:f7:db:0b:bd:a5:f2:99:
a4:b5:46:52:7c:88:5f:f3:86:a4:5e:8e:42:06:fb:c3:f2:cf:
fc:de:e3:bf:d7:53:5c:2e:4c:79:a2:ff:8c:7f:73:32:3f:c9:
02:62:1a:35:26:80:d4:08:34:1a:fd:22:28:cf:79:76:53:23:
b2:fa:31:18:8f:01:95:bf:a5:04:65:32:35:0a:d8:b5:10:cb:
63:a0:7f:47:ec:44:66:7d:df:6c:45:98:23:00:25:c9:4e:44:
e0:4f:b6:74:30:7b:22:a5:85:42:20:1d:b9:da:55:77:2d:ed:
85:9d:f4:4d:d6:17:3c:9b:5e:c9:c5:06:bf:24:19:71:b8:c3:
ec:66:0a:86:16:81:9a:67:90:11:5f:10:57:c2:55:cf:2a:76:
84:c1:5e:e0:52:14:b5:1f:99:5b:6e:1d:4c:ac:75:8a:9e:65:
e4:25:54:a9:90:c3:38:8e:84:69:c6:b2:e8:d7:6f:12:7c:5d:
5d:73:5a:03:9d:e7:d1:b6:0c:34:29:7d:31:b6:6c:60:24:ff:
1f:2b:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:48:34 2024 by rpki-client on console-fra.rpki-client.org