Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.cer (raw, json)
Hash identifier: 4oEWodKQrEgs+bpXFYs2PeFV3FqhYNoFPhanyO9/uuU=
Subject key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019081DEE42B5D931453E9397C70E5EE052E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Jul 2024 07:49:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35048
AS: 214574
IP: 45.89.16.0/22
IP: 45.134.180.0/22
IP: 45.140.52.0/22
IP: 45.145.116.0/22
IP: 2a0a:5680::/29
IP: 2a0e:8140::/29
IP: 2a0e:cd40::/29
IP: 2a0f:d000::/29
IP: 2a11:4ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:de:e4:2b:5d:93:14:53:e9:39:7c:70:e5:ee:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 5 07:49:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed4cd386ab33787fcd4002622b83876406fff190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:6d:49:f2:b7:88:c6:5f:8a:49:dc:4c:a4:
84:82:03:1b:7e:d8:b8:26:2f:f8:cc:14:08:4a:c2:
f0:2c:8e:a8:2b:ae:30:8f:ca:0f:60:f6:94:a4:df:
8f:42:13:63:2e:56:68:2d:ae:e7:ef:5c:be:19:30:
54:f5:b7:80:ea:cd:03:7d:e3:4b:52:97:63:8d:5b:
f9:31:1b:13:ed:29:23:80:33:e1:44:3d:a1:1c:cb:
26:01:aa:95:03:4c:72:bb:57:8e:05:2e:61:86:05:
c9:5b:85:bb:22:8c:92:62:06:9d:1e:4b:05:7d:43:
ae:3a:97:b2:27:cc:f6:10:6c:56:d3:d0:d8:c8:80:
4d:37:44:f1:52:c8:d6:88:c1:3f:63:9a:73:60:b1:
dd:1c:d1:07:5b:42:27:b9:0e:28:f3:ca:f5:b0:d1:
e7:ad:83:e9:5d:18:4e:55:1e:66:d2:47:56:31:5d:
35:60:43:2a:c8:d5:ff:4c:e4:2f:c5:10:13:8c:6f:
95:c6:71:a7:eb:95:2a:48:12:10:57:df:af:22:ac:
5a:70:46:5c:60:fd:de:3b:90:3e:f3:2b:43:48:83:
1e:f6:cb:34:e1:65:48:40:82:a4:c1:35:0e:f5:eb:
0d:60:03:60:e3:f2:7a:0f:d2:0c:03:87:5b:b8:f7:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.16.0/22
45.134.180.0/22
45.140.52.0/22
45.145.116.0/22
IPv6:
2a0a:5680::/29
2a0e:8140::/29
2a0e:cd40::/29
2a0f:d000::/29
2a11:4ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35048
214574
Signature Algorithm: sha256WithRSAEncryption
35:39:39:9d:ad:ae:99:ee:36:a3:6b:cb:a5:38:0c:18:36:ce:
b3:58:d8:b4:02:12:12:36:d2:68:fc:b5:5d:69:c9:60:13:a1:
9a:81:82:f8:eb:95:fa:9b:fa:8f:e6:0c:7b:fc:13:e6:37:44:
cf:d9:7a:f2:5c:67:5e:2e:ba:93:a9:ea:48:78:e3:d4:f2:55:
c3:a3:3f:ce:ad:43:6a:41:e7:11:38:7e:06:50:96:82:d6:6c:
1a:d0:8e:e4:fa:0d:26:9f:68:3b:8a:30:4b:24:ae:bf:7e:ad:
03:f0:47:cb:33:4d:b7:7f:62:8e:3f:45:de:50:03:16:00:5d:
72:4c:39:e4:b1:21:c2:7d:08:52:98:57:73:15:3e:75:92:71:
83:dc:14:d4:61:7c:96:b1:ff:fb:c2:c1:f5:f4:1f:f7:09:4c:
bb:be:fd:33:88:8e:6e:14:a2:e6:c3:60:3b:6e:88:35:f2:0c:
cb:e0:80:dc:79:ec:4a:aa:72:45:99:c8:b6:a3:af:eb:10:62:
e0:e2:37:56:9b:cb:b1:0f:ea:e4:0c:88:7e:79:aa:44:11:60:
5b:77:73:37:8b:60:75:a8:cc:b0:bc:3d:a0:97:bb:e5:63:0f:
d4:c5:5d:03:9e:e3:7b:7d:9b:f2:fb:f9:7c:b5:af:eb:8a:74:
01:dc:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:39 2024 by rpki-client on console-ams.rpki-client.org