Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.cer (raw, json)
Hash identifier: kxOkKJa2M3KfP2KZk98RmaJ+PVXc5QXCJwVq5TIGoDM=
Subject key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0C7ABADFF5617E53DD03C2B6D79B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34941
IP: 85.118.200.0/21
IP: 185.112.136.0/22
IP: 2a06:6180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0c:7a:ba:df:f5:61:7e:53:dd:03:c2:b6:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:43:84:06:63:8a:a8:db:1d:1e:93:32:98:
ef:6b:a9:b1:76:9a:a4:38:fc:17:db:0e:6a:8b:a6:
1c:b7:bf:3f:6b:41:79:6b:e6:12:06:17:69:59:de:
b5:21:5f:db:11:5c:df:27:9d:23:93:83:1c:8c:81:
e1:c7:ad:bb:98:d8:4b:aa:2d:63:b2:80:dc:ed:5c:
34:43:dc:c4:fd:31:a5:a3:f9:5a:ca:c5:d0:85:8a:
b9:93:83:1d:08:ba:44:70:1c:93:09:0d:c8:af:05:
84:de:ac:8a:ec:9f:91:62:96:76:7e:f1:96:45:77:
c9:df:98:66:68:31:5c:70:c7:68:3a:b8:de:e3:41:
76:f2:c4:b8:e8:44:ed:dd:f0:c0:7b:58:c9:5f:f9:
11:6f:41:8f:9b:b0:86:42:4a:c5:cf:fe:53:af:58:
a3:f7:a8:1b:3c:70:23:e3:1e:0d:0e:3a:a1:77:e9:
69:21:02:2b:ab:cc:5a:19:7e:ca:0d:8a:79:13:61:
b4:3d:31:9e:68:49:35:2d:1b:ff:b8:62:00:a7:7f:
96:78:d0:30:fb:31:f9:13:64:34:c8:f0:99:c2:f3:
09:8e:60:1f:12:95:35:f7:d7:e2:c1:35:f2:20:ac:
37:e1:6d:3d:2d:7a:20:84:a0:85:49:e5:45:4f:e3:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/22
IPv6:
2a06:6180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34941
Signature Algorithm: sha256WithRSAEncryption
0e:1d:42:dc:ee:30:bb:51:62:06:97:f6:6e:75:49:fc:16:01:
2f:5e:15:21:72:2c:ba:bc:33:ba:98:b3:e0:55:bf:97:56:bf:
cd:26:12:6f:50:06:a6:c0:06:aa:56:91:c2:13:c1:90:92:5c:
42:01:ac:19:28:ec:6a:81:62:32:88:96:2b:e2:91:32:ed:c8:
25:0c:f8:d0:96:e5:18:8e:0a:7c:52:8c:f8:4a:f6:49:3d:3b:
d4:e8:22:5e:d2:f7:49:69:8b:b3:85:5c:a7:28:dc:6d:93:77:
40:f7:4e:d3:c9:3a:aa:b1:9f:c0:3d:8c:3d:64:a0:64:21:2e:
3f:f2:1b:c0:3a:a4:53:ee:b0:e3:ec:c1:91:fa:4a:63:6c:a8:
a0:f8:5a:10:e2:13:58:3c:08:ff:a2:fc:bb:67:12:b4:25:da:
03:ee:3a:08:4a:65:be:d4:dd:b9:4a:73:81:4d:43:8f:ec:c4:
29:12:4b:fb:ad:b4:82:39:31:2c:f7:af:56:5c:bc:a3:2a:ef:
a3:39:ac:dd:96:f8:cf:9a:3c:e1:46:8a:19:9b:3b:42:68:39:
2c:c1:c0:8e:00:de:97:fb:22:59:92:89:d7:56:da:94:b7:80:
e2:08:5b:fd:1c:fc:f0:ba:e6:53:59:43:29:d0:d6:df:9d:0c:
53:49:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 08:59:42 2024 by rpki-client on console-fra.rpki-client.org