Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer (raw, json)
Hash identifier: 2epTv/2nf27C6/zYKbZ8x+OjNu2K3bSxL5DdhYNEoWM=
Subject key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DB260BB50AEAC011F9E3613AEDA657555
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 Feb 2024 14:45:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206926
IP: 46.228.112.0/20
IP: 194.1.145.0/24
IP: 2a12:afc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:60:bb:50:ae:ac:01:1f:9e:36:13:ae:da:65:75:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 16 14:45:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:d0:63:62:f3:e7:6e:05:2c:d3:d9:6a:54:
86:4d:00:f4:f5:c3:db:e1:ff:d4:21:02:30:ec:9c:
4a:0e:7f:47:09:f9:27:9d:01:2b:a5:99:ae:3b:21:
c7:00:ea:63:31:ff:90:17:be:b5:6c:7d:33:8d:07:
89:f1:3f:bf:a3:a9:1a:b9:48:83:cf:85:60:b5:97:
41:9d:ad:06:4e:8b:fa:75:ad:ec:74:bf:0d:0f:b2:
25:d0:7b:32:4b:39:35:4d:ef:eb:23:79:14:09:8a:
fe:69:f0:2d:1c:35:5f:99:95:5c:ce:a8:ba:ce:53:
2a:b3:55:84:25:7e:ca:a0:3f:bc:b7:82:91:36:e6:
76:c1:6f:87:f7:a0:4e:54:40:cf:94:74:1f:75:be:
18:fa:7d:db:c6:ff:44:83:01:dc:5f:c2:8d:9b:4c:
20:32:63:b2:79:12:51:a7:fd:f8:f4:10:57:17:96:
62:0d:ea:43:f9:52:fa:4c:cc:94:84:c6:19:0f:93:
3e:c4:c9:fc:d8:e8:6c:e9:38:f1:fc:21:b7:18:32:
ae:65:7b:ac:b7:b5:0d:86:fd:1e:9e:a5:1a:60:63:
08:a6:49:c6:2e:98:14:c0:de:f7:7b:61:59:2a:4b:
f8:f3:8b:a4:7f:7f:6f:c2:d1:5f:14:0a:7a:c1:f3:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.112.0/20
194.1.145.0/24
IPv6:
2a12:afc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206926
Signature Algorithm: sha256WithRSAEncryption
13:7d:f1:4f:8d:b4:d4:45:e3:10:08:dc:f8:b7:ec:69:3e:39:
11:87:a4:31:b2:e7:dd:d8:5e:67:d7:4d:5f:14:95:ea:f0:e0:
20:bb:1a:0f:0b:6e:22:18:21:4c:f4:74:cc:93:35:23:f7:ba:
6f:17:5b:6f:72:1a:7b:33:98:de:2c:2a:d4:1c:88:1e:41:15:
0d:3d:82:76:3b:e1:08:8a:a3:50:1e:b5:37:b4:37:65:5c:fd:
83:f3:01:4c:1d:c6:19:e4:0a:6a:0a:ec:0e:59:e9:34:43:e8:
f9:00:05:d4:3d:b0:da:de:54:01:38:fc:2f:5b:d7:14:fd:06:
3e:9b:00:6a:ed:66:41:4a:3b:a9:6f:31:14:03:1c:b4:41:f6:
72:83:51:a4:04:f4:70:db:58:f3:40:57:da:5f:14:d2:de:96:
04:9e:00:91:a2:03:c1:f3:e5:d2:bc:ac:ca:1c:5f:26:d0:84:
28:60:11:88:84:e6:f1:b6:82:9a:2c:fd:08:5b:8c:ff:76:bf:
39:af:35:57:c2:4b:ae:6f:81:b9:96:9f:84:cc:d2:43:13:c8:
a4:8d:80:9e:a4:61:3f:3a:25:62:2c:b2:71:75:54:c4:12:c3:
49:8d:fd:2a:a3:c5:c5:30:ac:54:de:17:ed:ef:33:de:2c:16:
7a:06:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:08:59 2024 by rpki-client on console-fra.rpki-client.org