Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.cer (raw, json)
Hash identifier: aJZ2nLu1lxxXvuEaR4dp8nGiQuRfE/MyvPZEvovxt78=
Subject key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727497C234B086C85535C2671872D8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207498
IP: 212.6.41.0/24
IP: 2a0d:9b00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:49:7c:23:4b:08:6c:85:53:5c:26:71:87:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:38:8e:bf:85:4e:08:81:9b:ce:3c:33:03:
2f:d8:39:60:68:4b:72:dd:23:24:da:43:c2:45:e6:
53:56:5a:cb:e2:83:a5:a4:f8:14:21:76:49:92:ae:
f4:36:12:3f:2b:1f:10:c2:a4:38:3c:8f:31:c2:ee:
28:e4:17:61:79:fa:f2:f0:72:08:95:da:b4:1a:6d:
0f:3c:48:1c:59:28:b6:6a:d7:ab:2c:4f:35:b1:25:
93:49:55:37:d8:b5:9f:31:94:47:ae:8f:99:1f:92:
e4:99:b0:0b:9f:f6:c6:e0:92:f6:02:21:5a:d3:22:
3b:ef:12:69:af:9a:1f:46:0e:e1:66:3b:9d:55:81:
41:aa:d4:8d:2e:a0:4e:a2:20:b6:dc:ea:af:1c:5b:
ab:3c:31:b3:f7:9e:48:4d:11:bd:5c:bd:6b:9b:9f:
dd:95:7d:22:a7:fd:67:b9:92:21:be:a6:f7:53:f2:
56:2b:08:20:c1:cf:95:71:2a:31:63:db:d3:3e:31:
66:eb:fd:50:d4:9f:53:6a:eb:0c:da:40:af:01:6a:
6a:74:5d:68:9d:12:49:29:43:65:27:c6:a2:1f:91:
cb:b6:21:5c:67:27:92:30:03:b2:37:a3:7a:98:1b:
da:ea:e8:ed:51:e7:1c:d0:66:ec:1c:1b:fb:65:d1:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.41.0/24
IPv6:
2a0d:9b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207498
Signature Algorithm: sha256WithRSAEncryption
45:17:30:76:ac:e2:b0:ca:7b:19:af:5b:33:6f:28:2a:7c:3d:
26:c8:cc:b5:c8:f4:bd:90:15:55:92:fe:2d:23:a6:68:42:48:
bc:00:34:b1:43:63:be:1b:dc:96:b1:57:ef:45:c8:05:82:e9:
bf:0a:f7:36:a0:44:d3:85:49:fc:ad:29:79:cb:50:bd:f1:63:
bd:b5:fa:bf:c1:99:78:fc:ee:5f:85:8d:9f:47:a4:93:26:b0:
02:48:0a:2a:2e:8c:76:68:64:1d:2a:ac:d0:f9:f3:89:2b:46:
12:1c:5c:e7:3a:20:83:a7:89:58:fc:75:5b:25:11:cc:46:aa:
53:10:f0:50:5c:8f:1e:5d:74:21:6e:a6:d1:44:5f:a9:88:4e:
d1:30:12:50:b9:85:3a:16:fe:35:02:15:d5:6d:02:5a:d8:62:
fd:77:9e:1b:04:4b:5e:57:e0:29:75:b9:9f:40:6f:22:85:01:
77:83:dc:49:59:c2:ab:f7:37:23:e7:cd:18:f7:56:3e:ba:8d:
50:9a:5f:25:a6:ca:5c:a9:85:fc:23:28:ea:6a:d9:9f:0d:79:
e1:65:27:16:8e:b0:9f:3e:dd:73:39:a2:6f:db:9d:44:2d:ee:
37:f0:36:22:3c:63:ed:45:35:10:ef:e4:07:89:5f:33:f9:b1:
23:08:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:57:52 2024 by rpki-client on console-ams.rpki-client.org