Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
File: 7m9CHCUwligDR9wuksoQzDmME08.cer (raw, json)
Hash identifier: hTP9bK0SyYmOfTFFMqPFEmxWo2KSSQv6K4s71wfB9OM=
Subject key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29C9FDE33F134D91C466257BCDC9DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44991
IP: 195.230.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c9:fd:e3:3f:13:4d:91:c4:66:25:7b:cd:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:c5:93:6e:78:52:d7:a6:2b:5b:85:09:a0:
8f:e8:7f:42:fa:a2:bb:9d:36:0c:64:2b:be:4c:06:
9c:d3:c4:42:2e:c4:9c:ca:0c:8f:eb:3f:f8:a9:d5:
fe:14:a4:48:d0:81:52:04:2f:e1:ec:9e:57:01:85:
c9:14:b6:98:47:c7:86:14:16:9a:54:db:64:aa:f1:
a8:6d:cd:60:ec:20:92:80:9d:2d:e0:b6:b8:8c:03:
ca:a9:71:c3:80:84:c6:01:09:ca:cb:01:c1:3d:08:
51:7d:f5:d1:ca:61:8a:35:39:36:c3:a3:d0:d9:f0:
51:3b:93:3d:19:2f:08:5b:e3:3f:8b:b1:40:23:3b:
0e:11:b6:2d:35:eb:e0:fd:10:cb:d2:5f:0a:21:fc:
22:ab:8d:de:86:73:66:6c:5e:65:3f:4a:2f:cd:8d:
ca:05:c1:36:aa:1c:14:b1:b4:54:b3:af:30:69:4c:
0f:7c:37:5f:53:15:60:dd:e9:fc:b1:d7:0b:b5:9a:
ce:01:f4:87:f6:4d:ab:b2:ba:76:ae:71:ab:f0:31:
92:f7:ec:a5:16:11:8b:f3:59:fd:10:64:ce:84:d5:
a6:2f:51:62:97:d9:8d:c9:21:15:1c:10:95:01:2a:
03:88:8e:51:9d:6d:b8:a8:8c:39:d4:12:88:bd:12:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44991
Signature Algorithm: sha256WithRSAEncryption
a0:a0:6b:c5:27:c4:e9:56:9d:d3:cc:32:4b:a4:0e:3f:d5:61:
e3:d4:4a:0f:85:5b:08:bb:18:7d:6d:ab:4b:6b:72:ee:7a:5e:
14:82:2a:2f:b5:26:00:e1:17:12:e5:5a:fa:fa:19:96:7e:ba:
64:31:ee:6f:20:14:30:41:e6:8c:f5:8f:c6:4f:0c:a0:81:2b:
7a:30:f6:69:f9:22:a1:01:8e:88:57:51:ec:b2:bf:c4:79:18:
fe:cc:48:c2:3e:81:6a:a1:64:48:91:36:e1:51:4a:15:ce:6b:
20:f4:b6:50:fd:fc:e7:a3:eb:56:c7:d9:b1:31:fc:3b:bd:6c:
ec:46:83:5b:28:e1:87:09:05:b2:ea:49:04:4e:9c:1e:65:52:
3f:41:26:75:65:7e:70:c1:ef:20:08:55:11:32:30:16:f1:74:
2a:f4:a5:5d:21:2f:9c:ac:83:17:f2:da:3a:d4:77:74:e2:b0:
32:5e:b9:41:48:04:37:96:13:03:c2:01:94:76:d1:ef:83:62:
9a:53:b2:2c:6f:92:46:3b:e9:5d:2e:01:7c:75:4b:87:38:87:
5f:5d:2b:b7:f2:c5:f1:d2:ba:34:9b:ff:f4:f0:1d:ca:d0:0a:
fa:67:fa:5c:21:14:29:93:6d:93:31:b8:ad:23:a2:9a:e6:38:
4b:e9:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:48:55 2024 by rpki-client on console-fra.rpki-client.org