Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer (raw, json)
Hash identifier: P1Jz3ZAfKN6AQAqAgV2JwHO0DH1LgxwGWk5H/lSGqeQ=
Subject key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019171DDC0F423F4B4B18825A3A1157A4877
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Aug 2024 22:17:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214379
IP: 91.231.182.0/24
IP: 2a01:f500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:dd:c0:f4:23:f4:b4:b1:88:25:a3:a1:15:7a:48:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 22:17:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e847e88749704294552fef54886111ed0586ec24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:d9:90:38:88:e1:57:47:9c:4e:26:b8:7b:
a5:5f:61:4c:27:c6:1d:a1:3d:ba:22:a3:a0:5f:b2:
8d:84:6a:21:05:b4:01:d2:53:4c:4b:28:a6:6a:ba:
42:b2:9a:ea:fb:bc:8b:e4:ff:4f:4a:08:72:35:92:
2c:b0:bf:ce:4f:de:0f:5e:2c:ad:1d:aa:45:e4:6d:
09:b2:14:f8:1f:02:df:a7:e5:bd:d5:6b:2e:b1:4b:
20:50:3a:33:9c:7e:83:00:90:6c:e8:d2:11:35:8b:
f5:a4:ec:5f:a3:74:ba:99:5f:8a:28:cc:d2:80:a5:
d2:27:91:cf:7b:85:6f:16:1d:96:1e:65:8a:50:8f:
8c:e1:e0:18:c8:7f:6c:b7:ee:d7:b8:2c:05:54:e6:
80:98:f5:38:10:5d:7e:60:04:37:a1:db:25:10:f8:
dc:98:54:18:c8:a5:dc:32:c8:99:47:81:dc:0e:42:
d1:08:2b:38:8c:4c:0e:bb:bf:fd:b0:ce:dd:cf:66:
f7:c0:93:9f:20:df:81:0f:42:97:16:e3:ab:4b:a0:
e8:2b:2f:4c:fe:0b:71:5c:eb:bb:31:71:65:b7:95:
60:34:7a:11:0d:af:d6:d3:79:f5:7e:e8:45:41:d2:
8a:8c:0b:3a:2f:ff:3a:ed:24:02:66:f5:7b:bc:eb:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.182.0/24
IPv6:
2a01:f500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214379
Signature Algorithm: sha256WithRSAEncryption
a0:11:2d:ba:2d:8f:e1:76:72:25:49:61:dc:f4:59:83:20:59:
04:26:63:b9:a0:f1:9c:2b:4f:a6:72:b9:95:e7:56:b2:cd:a5:
92:17:cb:b5:c3:81:e4:1a:03:fe:ec:3d:5f:89:2d:c1:4e:5c:
b8:37:b7:67:ca:5e:fc:55:2d:9a:73:84:85:3f:8c:8b:22:fa:
29:4b:32:5c:5c:41:2d:a4:ae:d0:14:1b:9f:56:1d:15:69:ef:
e3:73:1a:d7:0a:ad:e9:60:84:39:31:ed:2a:21:2c:70:52:05:
ef:b5:b7:00:2a:5d:b5:26:00:d8:70:bc:a1:d3:a1:ee:84:a9:
63:8a:25:32:86:e1:fa:08:8f:07:30:d9:53:13:68:a5:c4:de:
1e:59:0f:82:d4:0f:3e:e1:48:da:d9:f5:8a:cd:ef:a7:d5:51:
82:b0:a6:81:1c:9a:69:3b:7d:a3:1a:8b:b0:1f:82:f4:43:9f:
2a:63:d6:3e:5f:42:88:99:44:30:7f:3b:26:08:e7:d1:38:44:
2e:fd:4c:15:8c:3e:11:fc:70:f4:8d:d4:84:75:c4:00:f5:f0:
a8:e2:c3:da:e3:97:d3:47:10:5c:b7:82:e0:51:9c:8c:71:96:
0f:f1:94:5b:af:98:eb:6d:27:04:3d:9b:de:c9:06:9e:b1:36:
cc:14:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:19 2024 by rpki-client on console-fra.rpki-client.org