Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
File: 7512O0ngJKe2oZ6vffuYkRqclMg.cer (raw, json)
Hash identifier: TqQ0A8CZojIxmR/Tc3Y6Fb4gcDePzN5xiwbFeTxKma0=
Subject key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348B4CC315CF8AD7FC296F522DF5CCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212798
IP: 5.182.20.0/22
IP: 2a0e:b800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b4:cc:31:5c:f8:ad:7f:c2:96:f5:22:df:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:99:c0:16:74:c9:5d:3d:7c:08:24:28:8b:
ae:c0:94:20:25:16:10:32:fa:88:4e:1a:b6:2c:5b:
dd:a0:c1:cc:69:5e:0e:fb:9d:64:b1:d9:0e:29:45:
e1:3e:10:88:eb:da:01:fd:e7:5a:1e:db:d3:a0:e3:
1f:5f:d9:2a:6e:ba:b3:73:8e:19:6d:9f:50:31:b3:
63:d4:b6:fa:5f:53:93:eb:c4:42:a2:c4:67:63:ed:
16:9e:83:de:cc:87:62:34:29:f2:9c:d2:d4:f0:04:
c4:3b:71:0b:c7:9b:87:dc:fd:eb:6e:6a:28:61:05:
53:a6:f9:c1:83:8c:1a:f1:0c:e7:12:39:9d:11:80:
ef:12:7c:48:0d:ab:af:e5:b4:22:bd:5c:f7:cc:10:
b1:25:43:1a:a5:49:80:89:c3:3e:0d:b6:6a:da:5e:
cd:94:49:5c:09:88:71:4e:cd:f2:b9:5c:99:8a:7c:
f2:f6:42:1e:97:68:2a:f6:31:26:a3:44:63:ef:40:
d1:2e:87:0d:74:a8:1d:2a:a9:1b:a5:65:92:8e:96:
86:b9:7c:ac:a8:ee:1a:be:a6:ab:c0:6b:ab:6d:fd:
a2:2f:75:6f:63:89:ac:3e:40:c8:99:31:b5:9e:5c:
cf:61:83:45:69:e8:72:83:a4:18:3b:ab:70:3f:c6:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/22
IPv6:
2a0e:b800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212798
Signature Algorithm: sha256WithRSAEncryption
89:f6:0f:a3:3e:0a:9b:d5:95:8e:bc:ca:7f:0b:39:c0:21:1b:
2e:7a:dc:b4:99:d4:54:e2:7a:81:a9:d5:e5:d4:ec:fc:2d:11:
ff:62:de:01:6d:9c:ae:48:ee:2e:7b:25:58:df:5d:63:4b:b5:
ff:33:04:02:02:88:a0:0c:18:68:d9:05:45:20:86:a3:dc:55:
47:51:60:58:f0:41:b1:e6:71:22:70:87:6e:39:ad:5e:5b:ba:
5c:92:1e:df:e2:8d:7d:9b:2c:6f:18:6c:45:34:34:07:d8:d5:
60:16:90:d3:cc:58:e3:64:b7:50:98:7a:e3:2d:e7:23:a3:be:
7b:cb:55:6c:54:d8:85:5b:7b:83:91:3c:1c:ae:f1:fc:86:7d:
a9:46:1e:79:50:8d:83:3c:a4:a6:e8:55:a0:e4:cb:69:3e:17:
f1:95:ca:88:bc:0d:29:a6:07:fb:2f:53:86:18:6b:09:32:5d:
8f:b2:f5:93:39:b2:12:2d:71:b7:fa:e7:e3:68:75:32:93:11:
ee:1d:30:52:cb:22:46:a0:43:7b:5b:59:e7:54:64:56:f0:16:
c8:bf:d9:63:d5:4a:73:b5:b1:92:d6:9d:7d:c9:61:87:2f:0d:
86:ac:ba:de:43:8b:81:f9:a4:81:ac:d3:3f:ee:8f:f4:b7:84:
09:e3:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:42:59 2024 by rpki-client on console-ams.rpki-client.org