Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
File: 57M-njyTL3pULrAhBWzpSx6Ljws.cer (raw, json)
Hash identifier: 8AFhPRU4rRyF0ybl6Aq9d6+g4lzeLqHDZmFGvFK0bM0=
Subject key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348E5DC065D8AE6CDB1FFE675AFBDFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210246
IP: 109.196.32.0/20
IP: 193.31.76.0/22
IP: 2a0d:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e5:dc:06:5d:8a:e6:cd:b1:ff:e6:75:af:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:27:2d:f1:73:ec:9b:79:40:41:fb:28:e2:
fb:18:13:cf:34:7c:c5:34:85:a1:09:eb:93:2f:c1:
ba:bc:74:c4:b2:90:aa:9a:4e:29:b3:5b:26:ac:9a:
be:aa:99:82:06:4b:77:75:1b:05:e8:4a:4e:76:b5:
64:54:df:e7:ad:bc:29:cd:9d:4b:06:ec:23:0b:9d:
bb:73:a3:57:78:7d:30:e6:91:57:cd:5c:83:00:ad:
27:a3:72:be:a7:12:12:98:a7:65:f3:d3:48:84:b7:
da:3a:1b:9f:26:89:5f:94:8e:93:70:2d:31:32:1a:
75:72:f1:d9:85:6f:ad:d1:a4:df:b3:e6:bb:dd:6a:
f3:e8:e9:cd:c5:6f:65:55:a5:e9:4b:5f:78:d7:a4:
99:45:77:03:b3:23:7a:57:0c:2c:76:16:20:dc:87:
30:24:4b:9e:7f:1d:cc:f9:31:39:be:a1:60:fd:f5:
d8:61:cc:5f:58:69:cc:c4:86:38:0b:36:83:cd:66:
0f:2c:85:36:60:6b:7d:b6:94:80:1c:97:7c:29:fa:
6c:db:e6:2a:c7:01:87:21:bb:28:11:46:8a:50:0f:
d8:af:d0:63:e0:31:19:bb:d8:74:1f:89:64:78:42:
60:be:e2:df:b0:75:29:98:4d:48:a0:a4:02:df:04:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.32.0/20
193.31.76.0/22
IPv6:
2a0d:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210246
Signature Algorithm: sha256WithRSAEncryption
93:8a:2f:95:46:c8:06:8b:0a:4d:c7:fd:30:f5:d7:b7:ad:b7:
b6:3c:82:d3:f0:c0:2c:38:4d:9f:bd:53:75:ec:22:94:04:68:
79:21:6e:f4:92:72:a3:98:e8:92:10:08:30:96:11:76:cb:d6:
dc:8a:22:38:85:b4:82:e8:ec:ec:49:2a:01:fa:03:03:67:02:
be:d3:7f:0f:f0:fe:93:94:e3:41:0d:ea:85:a0:be:a7:6f:a9:
15:0c:06:d3:4d:48:a8:d3:ac:be:5b:f5:16:df:05:49:af:99:
dd:30:a4:f4:2c:45:af:b3:0f:42:44:ba:46:db:d4:99:7b:ca:
0e:71:74:ea:be:22:91:63:21:41:60:b1:af:46:2f:e6:01:98:
51:8f:a3:0e:39:35:3a:d9:9e:42:3f:ad:0a:39:59:0a:57:34:
4c:0b:0b:5d:e1:4f:2a:97:c4:4c:6e:b7:98:8d:c3:a4:10:c8:
12:44:84:1e:ed:d5:41:4f:99:e0:f0:35:85:d6:0f:ae:d8:bc:
b5:90:88:a2:ec:41:3a:b5:d7:02:9c:78:96:68:85:28:91:a4:
90:7f:d7:57:62:ab:ca:22:81:8e:d5:8e:be:7a:d7:d2:11:09:
c0:c4:b7:46:95:7e:78:8c:58:05:fd:3c:54:3a:36:81:f7:4f:
15:8c:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:04:14 2024 by rpki-client on console-fra.rpki-client.org