Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
File: 7fVL4bXtX9WS-spGjfERAJXz6go.cer (raw, json)
Hash identifier: ywmCjedSZ+2DVHKDOLdh+XBIw+kKFR2ajAMo/PJ0vcg=
Subject key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BA64D090388CE4B92E3927CEF79368
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208550
IP: 45.129.52.0/22
IP: 2a0e:4440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:64:d0:90:38:8c:e4:b9:2e:39:27:ce:f7:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:a6:ec:a1:f9:45:ca:e4:d3:da:f1:f0:09:
4f:15:61:47:24:b8:2c:5a:0d:db:ea:54:9e:c3:b7:
f4:c5:35:9e:39:ef:c2:10:7a:3d:98:ad:50:64:91:
f4:62:e5:38:bb:95:d9:a6:29:cd:9c:49:b9:76:5e:
45:5e:e2:3b:d8:6f:9d:e0:df:07:35:21:08:9f:22:
d7:91:e2:74:a2:5c:19:aa:93:cf:db:34:62:22:fb:
86:13:eb:13:95:f2:8b:fa:c3:9a:35:cf:47:f2:f8:
4e:de:26:78:bf:cb:f2:22:61:e8:78:16:12:d5:19:
bd:f9:34:3a:34:9e:83:fd:7d:cf:06:f7:86:78:51:
c2:7e:b7:66:2c:28:77:85:5f:81:09:2f:98:e3:42:
ab:fb:df:3d:dd:cd:9e:55:58:df:2e:28:6d:08:0f:
ad:3f:cc:d2:86:a0:06:6c:a6:16:98:06:f6:8b:2b:
db:21:36:24:23:49:8f:d6:34:31:e5:29:37:b3:0d:
e4:e2:72:2f:99:c9:ef:e1:93:b1:85:7d:17:2e:06:
89:b6:02:ce:b6:65:e1:fb:b7:87:bc:68:82:a9:a6:
2b:50:57:95:b7:40:a2:88:e5:ba:aa:c5:bb:07:55:
63:c9:df:ca:63:da:a6:55:93:08:2c:cf:78:0b:f9:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
IPv6:
2a0e:4440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208550
Signature Algorithm: sha256WithRSAEncryption
4e:17:81:23:d2:bd:51:98:79:a5:84:60:f8:6c:6e:84:21:d9:
93:00:2c:8e:70:5b:96:e8:6e:1f:cd:a1:c6:41:4e:7b:a0:75:
af:00:e0:48:9c:4c:4a:cd:ce:ce:83:3d:f3:ba:9a:2b:52:dd:
cf:ac:92:78:8f:fa:65:03:4e:87:52:e3:ba:c9:a0:2e:6d:d5:
64:b9:57:da:d3:26:01:2e:cc:e6:3b:a5:9b:79:47:37:06:a3:
20:d7:55:6d:c4:c8:a3:d9:22:97:c6:a9:d1:61:37:84:23:ba:
91:c3:44:87:39:f1:29:f3:90:ec:7c:15:5d:79:3b:bc:71:1e:
2a:29:f3:67:a0:7c:5f:75:a6:b0:c3:b5:49:9b:ce:26:e1:1d:
c1:09:ff:b9:33:56:30:35:01:cc:0b:d2:c7:b8:cf:0d:87:0b:
d3:45:b0:c7:7d:bf:a7:2c:92:99:e1:8f:e5:62:47:70:05:96:
f6:22:41:35:39:cf:48:66:ff:f1:f9:47:c7:4c:2c:6e:91:4b:
99:82:be:8e:8f:55:78:86:e7:e6:72:d7:26:88:83:00:29:1f:
38:f5:e6:70:c8:e4:fe:f3:8a:a5:f3:47:1c:35:f5:52:7f:67:
a2:0a:5b:d4:9d:f9:e0:a1:d3:29:e8:35:96:2c:cd:6b:82:84:
a8:d8:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:27:47 2024 by rpki-client on console-fra.rpki-client.org