Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
File: 7hw0csJazTRzZLfWMSYYqjUwy2M.cer (raw, json)
Hash identifier: LJbXZ+7QiGlmNGaU6rIpv0XDZUQN4cdHINlwV2yWo2c=
Subject key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D563A239AA244D87685769F34E231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 14.102.224.0/20
IP: 45.127.248.0/22
IP: 103.41.44.0/22
IP: 103.47.56.0/22
IP: 103.63.28.0/22
IP: 103.71.61.0/24
IP: 185.195.212.0/22
IP: 185.195.220.0/22
IP: 185.196.188.0/22
IP: 185.199.116.0/22
IP: 194.93.4.0/22
IP: 2a09:1e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:56:3a:23:9a:a2:44:d8:76:85:76:9f:34:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:66:1f:81:55:49:97:5c:34:5f:47:3f:b3:
bd:6e:d8:a3:04:11:21:ff:16:87:4d:84:6a:61:2c:
77:6c:78:e9:88:0b:9f:43:2f:52:f4:ab:b1:cf:61:
a5:a4:3a:65:fd:2f:83:d7:fd:0e:cb:8a:88:8a:b9:
91:0e:2b:dc:a5:93:d3:23:08:dc:43:5c:1e:ea:ea:
7a:e9:fd:72:2b:c1:2e:7b:a3:b4:0b:9d:e1:4a:fe:
ed:0b:82:46:b9:9f:2a:c7:ad:6a:4f:3d:9a:6d:af:
bf:bd:41:15:bd:ee:cb:4a:d9:23:09:77:af:7a:4e:
c7:49:e2:f0:7f:9f:07:7f:11:ca:2a:70:63:e1:0b:
ef:a1:be:7a:7f:08:30:50:96:c2:e6:fa:b6:16:02:
40:66:44:fd:f2:76:7d:bb:6d:45:41:21:22:ce:33:
13:00:d1:15:06:2d:ae:b1:2b:58:bf:d3:03:ff:1d:
1e:9a:3d:3e:b1:c3:68:74:53:64:c4:bf:33:d6:c5:
54:dc:17:27:d0:f1:4d:2f:62:e1:ff:c5:c6:ff:36:
8f:e4:74:67:f3:d6:f8:5d:f2:48:48:5e:7c:78:1c:
9e:10:3c:8d:66:4d:01:3e:f3:48:70:70:91:d0:6c:
d9:94:d8:34:d6:16:35:cc:78:2b:a3:af:16:20:90:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/20
45.127.248.0/22
103.41.44.0/22
103.47.56.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
0d:9f:7a:7e:4d:e7:0b:6a:63:c0:0d:0e:58:c0:9d:ef:95:b0:
06:80:e1:f4:18:21:c9:c2:c8:84:53:9f:0d:c1:06:9e:50:c8:
22:4c:0e:26:97:46:1c:33:0f:85:9c:f8:6b:09:e1:8d:ce:d8:
f8:17:c1:f3:80:0a:fa:a5:6b:b4:b9:a7:0b:f1:5e:18:50:0e:
eb:e7:3e:7c:e2:a1:90:c6:0b:35:e0:ec:c5:74:03:05:7f:52:
e8:75:d4:62:1c:fc:05:25:57:aa:fc:45:8d:7d:01:36:ac:27:
7d:74:93:0b:a6:bb:7a:07:9c:5a:ef:6b:4a:07:1a:b6:7e:59:
8b:d5:82:67:77:36:8e:28:f0:99:e7:04:f9:a1:9d:7c:02:b3:
ec:ee:4a:81:9c:78:b5:ea:21:b7:e0:87:3d:2b:fb:06:65:57:
3e:0e:d8:e2:92:5e:9c:39:b7:20:c9:78:3d:05:da:34:a6:18:
c8:f4:46:12:b0:f8:93:24:48:ee:a9:8e:9b:3f:97:3b:8d:4f:
a2:67:ec:66:89:89:3d:d8:6b:0c:d3:21:ba:07:04:5a:cb:09:
01:4e:28:c8:b3:3a:3d:00:3a:ba:0a:3c:ac:44:59:78:0e:0c:
01:bb:36:e7:b6:dd:c3:00:42:52:fb:60:9f:9e:b4:7e:28:91:
04:2d:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 19:17:12 2024 by rpki-client on console-ams.rpki-client.org