Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.cer (raw, json)
Hash identifier: by/L7D8scihMUdimM2IkSHWqkPfqTzL4ScEsc3PryMg=
Subject key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01933F81E8B6FC75A1760232B5B10101F4BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Nov 2024 13:41:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49771
IP: 64.7.88.0/22
IP: 91.90.168.0/23
IP: 194.242.24.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:81:e8:b6:fc:75:a1:76:02:32:b5:b1:01:01:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 18 13:41:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:6b:04:9d:7f:07:ae:1d:8a:de:18:5a:7f:
38:58:ec:e0:7e:84:46:08:a8:e5:1b:bc:d1:76:d6:
c7:59:d9:21:a2:b8:82:67:64:b0:ba:2d:ef:b7:b6:
d3:88:8f:bc:2d:d8:d3:65:f5:58:7c:33:72:97:c9:
1a:f7:fd:67:10:ef:1a:d8:be:05:d9:d3:43:a1:6e:
49:e9:fb:75:97:b4:15:da:fa:35:be:17:3d:a7:f5:
cd:44:ea:9f:9b:9c:70:b3:b0:cc:da:18:b9:c5:07:
51:84:37:5a:5c:67:26:3b:62:b8:a1:f9:ca:ea:d7:
71:74:e0:56:c3:55:4c:d8:82:ed:85:37:4b:af:68:
6f:8e:88:45:2e:90:59:94:b2:17:56:bc:d5:87:31:
7a:2d:95:a6:f4:15:04:bf:0e:61:cf:c3:e4:19:24:
b0:92:09:9b:be:f6:50:9c:ca:98:ba:34:6c:53:3e:
46:fa:cc:3d:95:a0:9e:5e:58:6e:41:64:a4:9c:82:
27:fa:7a:f8:5d:45:a3:57:1f:2f:5b:c0:00:5a:89:
5b:ac:89:31:2e:c1:98:f8:f4:21:a1:69:ba:71:d2:
be:4f:00:f1:99:50:9c:96:e2:8b:e6:67:2d:20:7f:
28:4e:d6:99:5b:ab:97:13:45:f7:d5:0c:36:8e:75:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.7.88.0/22
91.90.168.0/23
194.242.24.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49771
Signature Algorithm: sha256WithRSAEncryption
41:52:04:38:6e:fb:d1:2a:0e:84:d1:f3:29:f6:5b:90:e2:dd:
83:e0:c1:d1:47:ba:aa:d9:f9:59:a7:32:64:9a:58:b0:10:ed:
37:8d:b7:64:bf:1e:41:ca:eb:49:14:51:50:7a:17:42:2f:cb:
6a:93:14:3e:cb:b2:15:f4:83:0a:80:fb:89:66:e5:21:85:86:
a1:19:98:c5:64:50:ca:98:b1:b0:7e:7a:e7:0c:57:0b:75:54:
74:b6:55:c1:e0:9f:44:a0:28:71:d5:78:a3:30:a2:f5:d6:83:
1e:80:d8:ad:18:42:c8:9c:95:03:3d:f8:95:e5:9f:d6:41:cf:
16:cc:18:01:f6:fc:6a:10:4e:74:82:5a:20:d6:de:41:9e:0d:
8f:79:02:49:f7:c5:9b:8c:31:a9:1d:2b:7a:48:ab:e8:1f:67:
f9:ca:45:f9:56:15:35:5e:3c:be:a4:ad:76:16:73:1f:aa:be:
db:e4:08:93:ec:65:2b:a9:fd:13:ad:05:54:a7:71:5d:5f:62:
4c:b9:cd:6f:49:86:0c:c6:dd:3c:30:95:39:47:7e:8e:24:96:
f6:f9:3f:5a:94:8f:58:3c:b9:30:eb:82:bb:2c:58:99:ed:4c:
4b:00:03:38:4b:ed:53:f2:f3:61:e2:48:66:77:bf:d8:81:4c:
9c:a9:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:55 2024 by rpki-client on console-fra.rpki-client.org