Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
File: 7HmntUyMlNBsovaFlxokSfuPzs4.cer (raw, json)
Hash identifier: ewAsGza83TrZpx1aZr5/HKwmchoLgYUfon7DKanWXOs=
Subject key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4246A3AB7682EF0E970932870FD6B62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48280
AS: 52112
IP: 2a13:9640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6a:3a:b7:68:2e:f0:e9:70:93:28:70:fd:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:4f:43:de:26:36:81:d5:ba:aa:ef:c4:a3:
5b:e4:4f:33:28:7b:8d:fd:fb:2e:1b:40:50:7f:d7:
74:7d:6e:db:d3:ae:f6:31:77:79:1b:3a:0d:b7:44:
d6:b7:ce:29:af:8c:48:c0:c9:73:c6:f2:1d:25:55:
b5:80:21:10:59:2c:6c:a5:c4:ae:6d:bd:99:2e:80:
1a:ca:c6:5e:27:33:dd:8a:bc:89:76:6e:6a:6b:4c:
17:8a:cb:16:8c:08:e7:ef:25:8a:46:5d:9d:63:0d:
fa:05:76:ac:71:85:53:f2:3e:66:a8:58:a4:6b:24:
8c:e3:24:80:0a:e1:ac:0c:ce:b4:77:3c:be:d5:42:
e6:b0:17:85:ef:6d:94:f4:1d:ae:25:bd:4d:53:fc:
72:3f:72:0f:6d:0f:da:98:31:ba:f0:91:78:ae:03:
8d:46:cb:e4:83:df:11:80:e4:85:27:e5:0a:2f:be:
0b:94:92:91:f5:75:f0:85:1c:51:0c:17:42:c3:16:
9e:bf:a5:5e:e6:16:e5:3f:2a:73:41:9c:0c:11:57:
7b:71:c0:86:94:3f:5e:8c:6b:a7:c5:c6:bf:22:ba:
5b:c2:2b:5e:c4:2b:94:f7:c4:f6:fb:8c:80:06:8c:
78:ef:b4:1c:d1:38:70:f3:d8:bf:98:7f:c3:0d:5a:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48280
52112
Signature Algorithm: sha256WithRSAEncryption
5e:bf:43:78:cc:66:20:2a:fc:a7:e0:d1:0b:5a:d2:ed:08:50:
a3:61:d1:a5:b7:9f:a3:dc:38:a4:77:a3:d9:92:9e:d5:5b:38:
6a:53:2e:22:b2:5d:6d:8b:de:d7:6e:6d:35:b9:3e:93:de:b3:
70:2e:05:20:f5:94:30:84:87:75:a0:f4:40:a5:7f:8c:91:37:
72:f7:3a:38:11:74:db:1f:03:e0:3a:cf:1b:71:30:75:da:37:
71:64:64:d0:48:74:43:9e:40:cf:d9:8a:9c:95:a3:17:45:2e:
d4:17:69:ba:6e:05:13:72:6e:fe:86:07:90:b7:a7:84:aa:c3:
60:1e:c7:98:19:c0:d8:58:77:f3:38:e3:53:be:d2:a8:1c:57:
f3:25:00:7b:08:bc:d5:e7:e6:51:01:a8:43:2f:4d:6d:8d:34:
da:b7:88:06:bb:05:fb:b9:c2:6b:a6:54:c0:fd:63:58:8a:ae:
aa:97:4e:0f:4e:01:93:41:4e:64:52:32:6f:d8:c0:80:64:c8:
f4:ed:04:cf:72:2d:ff:0c:47:88:ab:b1:29:0f:ea:40:b9:85:
09:a4:d5:22:6b:c9:0a:a6:72:c3:5a:18:6c:13:13:49:21:d9:
6c:13:77:ef:7a:7f:4b:8b:c6:c6:05:68:64:13:b6:1c:d4:a8:
32:c1:ac:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 02:32:15 2024 by rpki-client on console-fra.rpki-client.org