Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer (raw, json)
Hash identifier: TulhlBGVAj6qXDoBcwd6wM5LkEjRwQxUbMVQClUHh1w=
Subject key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649C1DF18951CE458BA112D678376F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197255
IP: 91.217.60.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c1:df:18:95:1c:e4:58:ba:11:2d:67:83:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:55:8d:b0:1a:38:6c:b1:b5:53:8c:ea:ab:
2a:cd:a7:eb:c8:21:b4:53:aa:e2:1b:49:79:0f:21:
69:9d:53:c2:32:76:36:55:66:d3:e2:b1:07:65:ef:
22:5f:28:cc:2d:5f:0f:7c:3c:4c:43:9a:cb:c6:4e:
1f:2e:a8:bd:f5:bb:84:d0:5d:31:33:0a:3a:0a:e2:
7a:14:fd:db:aa:65:c1:a2:49:8d:8b:dc:4c:d7:f0:
0d:58:c1:d2:b0:6d:d3:69:0e:8d:0a:20:0e:b5:e1:
7f:3e:96:c9:cc:91:fa:eb:70:c1:ca:ff:b5:60:39:
56:a4:2e:3b:0e:13:38:a1:b5:8c:53:39:6c:41:53:
04:8f:c9:ca:f3:00:b4:bb:2b:08:ba:f9:e0:7a:8e:
48:7e:66:c5:ba:ea:3e:98:38:aa:6c:8c:99:92:ae:
c7:47:67:f5:3c:72:ca:66:76:7b:9c:dd:ae:79:c2:
ab:47:86:e7:b5:75:87:91:26:d6:fa:35:52:90:fd:
a9:0c:c6:4c:33:f7:6d:b1:74:a2:33:f9:b6:df:5a:
5d:b9:79:6a:47:58:0d:cf:20:7d:5a:45:bf:13:d5:
1e:08:26:e8:67:68:65:79:f3:f4:f1:af:a6:9b:c7:
89:5a:82:d1:56:ab:24:1b:0b:8a:87:79:fb:f4:10:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.60.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197255
Signature Algorithm: sha256WithRSAEncryption
a4:10:9a:24:1b:1e:0b:02:30:ac:d1:fa:6b:18:54:c1:0c:0a:
95:43:f5:43:a5:5f:c9:8d:38:94:ad:c8:04:6f:85:5d:4d:cd:
99:30:7f:13:53:b1:a4:88:ae:1b:98:2c:b2:5a:d6:c7:99:68:
96:10:aa:a9:8b:53:d1:3c:bc:4c:89:e3:17:fd:43:f0:e1:b3:
7c:b7:2b:c8:c7:1f:91:de:7d:3c:8b:b1:b0:e0:e8:5e:5c:da:
db:56:30:e1:78:10:d1:7e:ab:10:22:2c:d8:95:c9:5f:c0:dd:
58:80:0e:f6:4b:4b:3a:4f:e0:f9:28:47:2f:2b:74:1a:31:3f:
71:56:c4:6d:b9:85:07:21:e8:2b:04:7a:1d:37:68:66:77:83:
ce:ed:96:00:22:39:a9:c2:60:84:49:0f:21:94:f5:8e:3d:97:
03:8c:18:5a:9a:e7:a7:3f:08:89:5a:47:2c:f6:d8:9c:ec:77:
5d:47:ed:c5:56:d6:5f:74:e0:27:c2:7b:c8:75:62:9b:47:37:
80:f7:d8:aa:de:5d:7e:4c:40:ef:55:97:13:c1:1b:c3:f3:fe:
b3:c3:73:c4:e8:74:3f:6c:44:31:37:ea:65:41:a8:cf:9e:2d:
f2:d7:ac:2b:86:06:49:79:7c:1e:ee:ac:bc:2b:94:f8:13:a0:
1c:b9:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:55 2024 by rpki-client on console-fra.rpki-client.org