Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
File: 7Er2_cFtaK4mqg6rViPmviFwNsE.cer (raw, json)
Hash identifier: gwZij3LEifWi/txkwVrme49li8QS8vONlJSoHGRmzow=
Subject key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9114D32DC7D7DEDC5C4F19E45BD14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43955
AS: 58262
IP: 5.61.24.0/21
IP: 92.119.56.0/22
IP: 185.73.112.0/22
IP: 2a05:2d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:11:4d:32:dc:7d:7d:ed:c5:c4:f1:9e:45:bd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:a7:84:7f:05:8e:02:ea:5f:5c:fb:45:89:
fc:83:52:c6:61:eb:87:d0:79:c0:69:bd:b7:63:a2:
dd:cd:37:37:36:4f:3e:4e:d8:89:6f:96:39:9a:2b:
79:a7:fd:b9:1e:54:35:5c:6f:9d:8f:22:3d:19:10:
60:a7:a2:9e:42:de:7d:d2:43:ae:84:63:a2:58:bb:
2a:6a:ee:40:75:a8:a8:94:4e:1e:28:f5:c2:5f:fc:
fa:6a:a6:fb:5d:bc:25:a3:15:ff:b8:73:c3:fd:d6:
1b:88:6d:59:23:ad:6c:19:27:b3:fa:a9:0a:fe:1e:
ea:b7:e7:91:1b:9c:88:1f:23:26:0a:f3:42:06:6b:
de:48:c0:8a:7c:7f:51:cd:b2:76:09:66:76:90:59:
19:08:67:a2:d0:24:fb:4f:62:b7:42:b0:18:16:47:
b2:d1:7b:15:ee:54:58:e8:70:9f:a8:3c:d1:e3:23:
10:5a:30:c6:33:65:3f:ad:42:99:99:2b:49:9e:95:
70:27:e2:4e:84:f3:a8:73:35:54:12:01:8c:8f:6f:
9b:69:64:b8:34:0f:a0:3b:70:66:c2:d6:03:51:75:
74:76:73:86:df:34:b5:a4:37:f0:19:c3:04:aa:5f:
69:d1:79:ea:69:07:03:76:54:6f:77:43:e4:d1:13:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.24.0/21
92.119.56.0/22
185.73.112.0/22
IPv6:
2a05:2d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43955
58262
Signature Algorithm: sha256WithRSAEncryption
30:6b:74:fb:b6:bb:f5:31:9f:af:99:80:85:3e:6a:a7:89:e5:
e7:9f:4e:2c:da:69:6f:a3:c5:1a:59:75:d4:ee:22:db:90:7f:
18:8f:8c:72:ba:04:e4:08:d7:96:5e:3f:4c:2d:c9:53:e0:63:
e7:eb:37:35:3f:3e:7b:18:a9:b5:b9:dd:7a:31:27:f9:47:42:
72:fe:19:bc:b6:33:f2:df:22:52:db:44:3d:f6:b6:be:41:59:
b6:fd:48:2c:22:fa:db:55:f5:f8:b2:6f:a9:8f:fb:b0:0f:88:
1a:ad:83:6f:38:73:d1:88:d6:4d:59:b8:67:eb:ad:71:3e:bd:
e5:c6:75:95:2e:66:35:b2:96:d4:73:7d:3a:8a:23:3c:cf:75:
3f:07:37:18:10:68:04:08:44:e0:52:41:65:da:9a:74:47:33:
f6:0a:d0:f0:15:2b:0e:08:f6:7f:fe:2a:ea:71:ee:61:b0:3f:
d3:f0:f8:fc:f5:e1:df:4d:bd:5e:43:04:39:dc:26:e5:90:a0:
89:fd:e0:4d:96:07:1c:6e:6f:46:fb:b3:57:53:af:e6:d1:c7:
dc:53:9a:ec:01:9b:6d:44:69:d6:6e:ee:36:9f:b2:b3:0d:6a:
48:7f:b2:8e:61:23:6e:bc:6c:3b:d8:90:04:d8:12:b7:21:a8:
be:13:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 19:31:08 2024 by rpki-client on console-ams.rpki-client.org