Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
File: 7eApTRMFvrr2iUZCv9kv1DmCUQI.cer (raw, json)
Hash identifier: crdtquIOCpoTbc7KCXZQxlHIxnXq1mMJ666PEcVo61E=
Subject key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA90EFB48EA2693DE071AFA0FF299
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48953
IP: 46.30.176.0/21
IP: 46.252.96.0/20
IP: 185.24.124.0/22
IP: 185.205.92.0/22
IP: 2a00:66e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a9:0e:fb:48:ea:26:93:de:07:1a:fa:0f:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede0294d1305bebaf6894642bfd92fd439825102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:3b:17:62:37:73:e7:8f:df:5a:76:3c:13:
19:fe:26:2a:0d:2d:cc:e6:ce:56:e4:a2:59:92:46:
5b:ce:09:a0:dc:e4:7f:18:e1:7b:49:82:92:c6:81:
4c:7b:c6:9b:a4:8c:37:1a:95:23:fb:52:ec:7b:8b:
21:a7:3f:37:48:5c:a2:89:32:6b:9c:d5:f1:b0:ee:
d8:1a:af:20:d3:35:16:ef:d7:57:be:ce:d6:cc:20:
5c:e9:d3:c1:95:ed:1b:cd:d0:0f:9a:db:0e:2a:51:
e1:7f:d1:0d:40:51:6f:ba:45:1d:5f:bb:62:14:fa:
32:e1:56:a0:12:53:7b:11:86:15:a8:49:cb:c0:85:
18:3b:ae:ab:00:90:24:b5:24:95:66:f0:4a:da:88:
21:83:66:fe:07:bd:f4:0f:cc:99:51:35:43:68:1b:
54:e3:fa:53:44:00:ad:7d:91:e2:05:de:8c:bb:5d:
5e:4a:55:94:82:24:0f:b3:6a:9e:4d:54:bf:10:51:
5e:c0:15:2f:d4:9a:7f:be:15:fd:bd:66:1a:1d:f9:
15:4a:a7:77:60:12:3e:dd:97:e8:dc:9d:22:20:91:
19:84:5a:fd:b4:c6:8e:82:69:d3:94:66:5a:0a:94:
e4:7d:31:40:ea:91:6c:80:70:34:bd:7f:76:d1:0e:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.176.0/21
46.252.96.0/20
185.24.124.0/22
185.205.92.0/22
IPv6:
2a00:66e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48953
Signature Algorithm: sha256WithRSAEncryption
27:a7:f7:8b:ab:02:89:9e:5e:50:c6:0b:50:0e:78:aa:55:56:
e1:c2:22:12:dc:51:ed:e6:5f:4d:fc:40:79:fe:a4:8d:ee:38:
56:96:7d:a0:5f:ba:c9:09:d1:94:bb:ab:bc:1d:4e:3f:99:03:
cb:4a:73:78:f7:d5:fb:7f:0a:95:81:87:34:e1:08:ed:48:08:
40:8b:fc:c6:e7:9c:e7:d2:97:9d:52:1a:a4:6b:7e:ab:cc:f0:
cc:76:72:4d:7e:de:e7:df:47:13:6d:3a:24:c5:c7:61:3f:e0:
59:98:e0:a9:42:11:1a:66:d5:6c:04:04:da:8d:6d:3c:93:d4:
5f:c2:6c:8f:85:24:6e:c8:bb:41:67:2b:dc:8a:bd:b6:85:a0:
16:f8:f1:83:ef:81:96:a5:63:8b:10:57:53:9e:d1:a4:ab:63:
49:80:e2:6d:5d:27:c7:cc:ac:d8:79:e0:dc:45:b4:84:49:ca:
98:b2:d8:c8:ad:9a:ef:17:9c:8d:e0:c1:9e:e2:01:01:81:56:
e9:b5:63:74:ea:23:76:3e:92:05:3c:29:2f:c0:8c:fb:00:9e:
a4:05:3e:ae:73:60:43:6d:3d:e9:c7:a5:1f:bd:ad:fe:12:f2:
7d:8b:b9:39:df:a1:c8:8c:90:bc:66:92:3c:b0:cd:0b:2c:67:
7c:1f:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:55:41 2024 by rpki-client on console-ams.rpki-client.org