Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
File: 13EApGzEauiWvcLg4HTjBVq4hns.cer (raw, json)
Hash identifier: FKgAc6NI8RyQK2kJ4mJvcOQrnc9d/lNnZrQm6AaUS0k=
Subject key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CAFDAE56ABBBE6EFE18E47EAB3465
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38935
IP: 195.254.134.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:af:da:e5:6a:bb:be:6e:fe:18:e4:7e:ab:34:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:b7:5e:5f:86:0a:6f:ed:8f:3e:17:ea:74:
04:7a:d6:7f:6b:07:ab:e3:29:ac:11:3d:e4:b4:48:
c7:28:05:61:e8:94:64:c6:1c:ec:31:08:ed:d9:cf:
89:58:15:c2:97:cd:ae:09:d2:26:4c:65:6d:b9:0e:
68:5d:5d:a6:a7:2d:54:61:cf:4c:0e:d2:09:4f:7b:
75:5e:9b:7d:08:36:a0:83:63:62:44:91:c3:6c:07:
56:5b:0a:0b:44:ff:6a:37:da:aa:71:77:73:a1:b9:
54:d6:7f:5b:4c:2e:3d:01:4c:80:fe:91:ab:a2:36:
1c:54:68:a1:39:d4:a7:3b:ec:4f:a2:96:d2:6f:f3:
c1:27:54:e9:21:b6:4f:01:6d:f9:77:dc:45:3d:2b:
a1:cf:bb:f2:25:86:5e:63:70:67:eb:50:bf:24:d0:
96:03:91:11:c0:22:80:bb:02:7c:00:33:72:25:9d:
72:60:e5:ea:71:bd:1b:14:f5:95:0c:9d:80:1a:f6:
f1:7f:e6:08:bc:7c:4b:af:fd:22:97:c4:72:1d:30:
fa:38:92:bd:fb:01:9e:ed:b6:bf:1a:a2:f8:22:16:
e9:32:7b:34:95:97:69:00:09:3e:90:ec:cc:87:40:
5c:05:a7:fd:b0:c7:10:6f:66:f9:a2:53:d4:1e:53:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.134.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38935
Signature Algorithm: sha256WithRSAEncryption
85:5b:ef:91:91:54:79:63:b9:d3:93:5a:a9:d9:55:74:e5:64:
3a:2d:a3:c6:1b:9c:16:d5:fd:18:2d:de:3f:4a:be:ef:9f:9f:
53:81:dd:69:4f:37:91:a1:7c:43:5b:46:31:e0:af:1d:46:ef:
5f:62:a0:8b:86:d5:9e:c6:a8:fa:a8:e4:42:f6:60:b1:5e:84:
97:9e:e8:89:2b:4b:ae:c5:c4:cb:53:22:ee:56:a1:93:e9:ef:
54:5c:4c:6f:dd:92:ce:17:78:eb:b7:49:be:6d:7b:35:2d:b3:
c1:92:f2:c8:cc:bc:0f:6a:70:85:64:94:29:23:90:52:20:40:
0c:f6:13:05:c6:2a:ff:3f:bb:c9:cc:0f:5b:c8:59:71:b3:09:
57:32:9c:34:3f:a2:cb:aa:77:69:96:d9:5b:45:ed:64:d1:44:
7d:50:2a:0c:94:79:67:6b:26:67:16:c6:9a:99:b6:c9:8f:7f:
b2:46:2f:78:99:86:c7:3d:fb:25:be:cb:32:71:05:ab:47:9d:
25:92:d5:f3:0a:35:89:6a:cc:94:47:19:91:57:30:c1:b5:3a:
c8:55:b1:6c:7a:36:12:42:e8:92:54:de:e3:f5:c3:ee:da:ef:
c3:4e:a9:cd:c3:87:79:e5:a0:4c:b7:47:28:6c:32:aa:fc:68:
fd:ee:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:49:48 2024 by rpki-client on console-fra.rpki-client.org