Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
File: 50eFUAaL94IgQIwl1hK8L7AkYME.cer (raw, json)
Hash identifier: BliWX/UuUyH6uNzlDyy4wxCj7qkOliWcYyQI5FQ+UII=
Subject key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E562FBA9BD6AE383E594DFAC5A57C033B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Mar 2024 10:09:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16253
IP: 217.142.0.0/19
IP: 2a03:f0c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:2f:ba:9b:d6:ae:38:3e:59:4d:fa:c5:a5:7c:03:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 10:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7478550068bf78220408c25d612bc2fb02460c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:18:18:7c:d7:55:df:24:fc:42:87:57:d8:
a4:1b:31:16:b0:4e:36:7a:95:9d:52:9d:e0:e0:56:
ce:5b:c4:cd:46:e5:68:e5:d3:58:1a:32:98:a0:a7:
65:fa:7a:d8:81:8f:63:4b:cc:d3:7d:d5:a7:4c:fa:
23:28:aa:91:24:7e:a8:d4:fa:7b:25:04:47:f8:0f:
89:c9:95:b7:0c:23:ab:1b:f7:fd:46:96:54:0d:4e:
d1:2e:1b:2b:6f:25:c8:7f:ba:9c:53:93:d1:6e:5f:
46:62:ea:76:b4:91:65:ae:9c:73:f2:01:2c:6a:f5:
b1:9a:49:dc:bf:6d:86:7b:3f:fb:1f:cd:10:5c:dd:
ef:4d:4d:5c:7d:f0:54:28:33:5d:66:c6:49:dd:ae:
ab:0d:27:bf:41:f2:f3:ee:be:11:b7:c5:44:f9:19:
91:14:86:93:89:01:5b:76:bc:a9:70:d5:2b:51:af:
52:d6:43:7b:25:c2:75:c0:6b:35:01:dd:12:00:c5:
f9:0c:9e:2e:84:52:de:3b:f7:3f:45:df:8d:cd:ff:
dd:03:2e:72:db:7a:01:22:21:a8:5f:a7:3a:05:26:
42:05:22:66:17:fa:6b:94:cc:b5:79:7a:38:d6:7b:
96:06:a4:bc:e4:e2:88:82:d3:6e:66:49:17:84:b8:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.142.0.0/19
IPv6:
2a03:f0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16253
Signature Algorithm: sha256WithRSAEncryption
49:65:5c:49:ad:73:cc:b4:e5:3d:8b:cc:e1:ca:8d:2c:cc:8f:
94:54:6d:9d:a4:c3:71:08:1b:92:9b:fd:98:0c:48:62:f2:0f:
c8:33:3b:99:d0:e6:e3:fe:1a:d1:2f:1e:80:86:b7:5b:98:fc:
13:9a:7b:05:31:ff:fe:ff:17:e2:8e:29:52:ad:aa:dc:59:6f:
22:22:bc:51:f3:6e:0d:18:05:ac:2d:bb:1d:76:25:c3:8c:00:
7c:83:e2:d7:84:05:55:fa:bc:c6:84:2a:39:ed:21:6d:c6:77:
5e:36:fa:63:cf:86:2d:ab:54:ce:f1:22:42:6c:83:21:40:ce:
5f:a9:d5:9c:7c:f1:d5:fa:24:49:3a:5f:0c:08:54:c4:f7:4e:
fe:05:e4:b6:bf:38:c8:e7:d6:37:6e:48:db:20:3f:a3:97:91:
c3:91:53:75:97:44:15:15:37:52:b3:ab:94:73:31:0e:c0:77:
12:a0:91:d2:dc:93:89:1d:19:cd:0a:7c:18:84:97:95:6d:e3:
54:e2:5d:60:48:f0:20:60:b1:e1:e3:bd:7c:45:7b:7e:59:72:
6c:1d:0d:1d:5e:42:b8:d5:d0:cd:57:0a:06:a0:0f:12:4a:50:
47:77:69:3d:b1:29:16:09:ed:5d:4b:f3:e7:56:ab:04:43:ba:
a6:7f:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:54:40 2024 by rpki-client on console-fra.rpki-client.org