Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
File: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer (raw, json)
Hash identifier: e9F+9/hR9Z+7hz49zDnd63WEJ7IUN6Jy8/Xi4eE7GFs=
Subject key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010704250894156EDCFA9A1F86F7F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31303
IP: 217.174.16.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:07:04:25:08:94:15:6e:dc:fa:9a:1f:86:f7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:61:db:f8:5b:cd:36:20:16:1a:16:0f:10:
32:5f:21:45:57:72:87:06:a4:64:8a:dc:ce:bc:cf:
44:39:c3:6b:21:05:67:01:24:b5:5d:95:72:c6:b2:
1f:11:2d:e3:f5:8c:b0:58:62:52:aa:25:3f:f7:a9:
92:1b:ac:f2:a1:3a:d3:c6:28:f7:8a:80:c6:68:cf:
da:d3:b0:0a:b4:a1:57:51:5c:c5:a2:ea:f5:08:4b:
7a:72:7a:68:0b:33:88:92:46:60:66:72:03:3f:ce:
b8:22:18:c6:22:ea:e9:86:75:0f:84:21:4e:de:d9:
4e:04:ed:b2:87:de:58:37:8e:67:96:54:a7:ff:a8:
d7:5b:28:20:71:aa:16:14:e1:d4:36:15:7d:52:cc:
48:72:80:41:7d:be:64:3f:9f:a3:13:67:e0:76:8c:
22:f7:86:c6:d7:1a:98:8a:53:fb:cc:a2:2f:8b:23:
47:29:f6:66:b6:8d:de:2a:81:87:01:ec:d2:fa:88:
b6:63:6a:6f:e7:7d:0a:6b:91:50:62:d5:39:05:8a:
dc:2f:72:67:4a:0f:7c:23:69:83:14:07:4c:fe:1f:
19:58:12:f0:a4:b2:60:4c:b5:f7:d8:bb:6e:5f:8a:
18:5d:cd:8c:44:a4:57:18:29:af:da:ac:c8:b6:79:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.174.16.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31303
Signature Algorithm: sha256WithRSAEncryption
b1:b2:0c:ac:d2:12:82:52:07:35:7c:93:b6:f9:2b:e2:63:8b:
48:5a:2d:b1:a6:7e:6e:1e:a9:59:6a:05:52:91:ae:99:f0:0c:
92:8e:5b:49:d8:39:18:14:47:80:e6:d9:52:84:29:4c:0f:7a:
42:be:e7:7b:28:01:e0:15:10:7b:ad:b2:fa:bd:24:ce:ef:5f:
47:d6:ab:8a:70:d4:1d:b0:9a:65:02:ce:7c:bf:fc:70:dd:92:
43:f1:51:19:db:17:04:ab:05:f7:2c:7c:e4:5d:25:9d:fa:08:
83:1b:21:8d:29:23:94:5f:7e:c4:9d:2a:b6:20:06:e6:71:20:
5a:6d:d3:1f:7b:8d:32:10:7a:fb:83:f5:90:e8:0d:2f:2c:59:
72:a3:0e:5c:a2:d8:fd:3d:7f:54:ab:17:b6:85:fd:b4:64:18:
81:7b:6e:58:e3:2c:c3:43:95:fd:a0:a6:72:c4:57:9f:0d:db:
48:5a:ca:a1:de:72:9b:27:9e:f7:e8:a0:cb:23:08:9a:d6:b6:
1e:b8:e5:4e:56:eb:d6:0d:b9:b2:61:c1:17:b4:c8:8d:16:08:
22:aa:b7:4d:b0:5b:72:8c:09:96:0f:84:4b:58:d5:ec:e9:c9:
08:e2:c5:c0:6d:a8:cb:0e:f6:46:09:ac:3d:1a:ef:b7:25:f8:
54:5c:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:48:52 2024 by rpki-client on console-fra.rpki-client.org