Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.cer (raw, json)
Hash identifier: 0JEHspygRvEoutaozXVXMoRRu0mlO5wLbSEUkaXhBnM=
Subject key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FC96BF917EC097836BFE522C696D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197235
IP: 46.29.72.0/21
IP: 141.0.176.0/21
IP: 178.18.6.0/23
IP: 185.33.200.0/22
IP: 2a02:21f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c9:6b:f9:17:ec:09:78:36:bf:e5:22:c6:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:d1:25:a3:33:0a:19:93:6c:2c:bd:61:c0:
97:a2:ce:fb:ce:e3:3d:8a:bf:d7:5e:b1:8a:fc:d8:
ae:fb:58:0a:65:32:c5:61:35:a5:ad:1e:43:81:35:
61:a1:89:b1:3e:8e:20:3c:ee:f7:6d:d4:c1:9f:6f:
e0:0f:86:df:8f:8b:45:90:a9:f3:ae:27:dd:c9:d9:
c8:4b:e5:e9:3e:eb:e6:f5:87:e9:eb:5d:91:e1:28:
af:6e:7f:f9:b4:a9:06:79:29:43:14:26:89:9a:4e:
c1:7e:0a:99:e9:bd:d4:aa:79:4b:9f:94:a6:81:2a:
55:98:f8:d0:50:52:e2:03:52:1f:fc:e1:76:11:84:
87:ea:1e:ed:43:8b:6a:c8:0f:ca:fe:26:d3:d9:12:
d1:32:bb:24:99:61:fa:0a:2d:0f:7c:0b:a1:ef:23:
fe:43:6e:0a:89:2c:b0:96:5a:a7:5e:b6:27:6c:06:
10:c8:0c:41:a3:34:df:29:8b:4d:fe:12:ea:b2:bc:
55:1c:82:76:b7:fe:1c:3c:02:9d:92:09:44:aa:7a:
f3:5f:11:d2:10:f0:67:d4:1d:16:c2:85:23:49:b4:
75:d0:10:50:84:c9:da:bc:9b:05:d0:fc:ef:82:86:
10:7d:5e:1d:ad:c3:ee:de:84:15:0d:a2:a2:08:16:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.72.0/21
141.0.176.0/21
178.18.6.0/23
185.33.200.0/22
IPv6:
2a02:21f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197235
Signature Algorithm: sha256WithRSAEncryption
6a:c2:d8:c1:a9:ee:38:8d:fb:56:47:8b:0a:37:70:80:ca:bc:
2d:b9:f6:36:b8:3d:96:62:35:eb:d5:22:72:f9:ca:7d:ff:11:
9e:5d:f7:13:05:13:57:75:11:ae:93:d6:00:b7:a9:12:b8:24:
72:ca:71:42:f5:02:da:16:5d:38:a5:05:b1:4d:37:78:de:f7:
f5:18:a7:a9:27:b0:b1:18:eb:0e:dd:73:cf:1b:c7:a9:ad:d5:
5c:5b:d8:80:17:0d:21:87:fa:92:53:91:f8:fe:46:71:81:3a:
c1:ad:25:bb:a3:0b:27:cc:82:8c:ba:ee:aa:3a:29:d9:af:43:
07:48:fd:97:b8:6d:2d:a9:14:f1:1a:61:59:0f:28:2b:f0:3f:
a9:96:69:76:3e:98:a1:b8:b0:53:0e:60:58:36:e0:83:7a:2f:
c2:c5:a6:75:12:1f:1a:3c:8e:8a:6d:87:67:a1:10:60:74:d2:
19:33:8e:68:c7:c8:b2:79:01:4a:ee:9f:c3:9e:10:34:c9:9d:
53:6c:84:a0:71:fd:57:2a:5b:4f:e0:af:ca:d5:00:0f:dc:58:
8b:9b:dc:00:f6:3e:01:ed:cc:9b:5f:c7:1d:2e:aa:14:3e:02:
7c:b1:ee:7d:86:63:35:8a:48:c0:ab:9a:ab:72:fa:12:e3:ea:
5e:f9:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:06:37 2024 by rpki-client on console-fra.rpki-client.org