Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer (raw, json)
Hash identifier: 9963J3TkuTt41LK2aRqEnzLIxpL3mOomSNWUG//CHBk=
Subject key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCC72A597E0E119D27F3F8BE6EC8B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8253
IP: 192.108.114.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:2a:59:7e:0e:11:9d:27:f3:f8:be:6e:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee82395001b03c663509909979dfb78445b3d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:9c:7a:bc:a3:f2:fb:dd:d6:fb:64:7d:16:
c5:4c:7a:e6:e0:e6:9b:b7:f1:c9:3b:4b:19:85:16:
c7:9c:0d:e1:2b:6c:59:2c:c3:62:1a:59:f5:a7:ed:
4c:05:cf:f3:e9:0a:81:2b:c2:c7:00:93:05:8f:97:
e6:d9:f8:7f:16:e9:12:a2:50:ea:e1:cd:70:59:7f:
66:a3:c2:3e:7a:ed:13:88:d3:c2:a0:e0:bb:bd:68:
04:23:a4:3e:82:fc:ac:72:79:8f:03:87:7f:ec:33:
b8:72:82:95:4d:5a:c3:c8:a6:76:ea:62:b9:a9:b2:
45:20:48:71:08:eb:ad:6e:5a:16:d0:c5:92:2c:04:
0a:88:b7:d7:77:a7:71:cf:ff:6d:bb:7d:d9:95:1a:
01:83:8b:6d:4b:59:ea:12:57:5f:a9:3a:5b:6a:a3:
c3:bf:87:67:14:7d:58:93:a0:cd:89:ad:b4:f8:68:
d8:d2:c3:88:22:be:1c:b3:bb:ce:34:fb:4b:60:17:
30:f4:7d:03:f4:1c:5f:be:8a:f8:9b:a5:4f:12:54:
b1:6a:45:93:ea:e8:05:8e:54:68:e4:93:99:b8:66:
43:96:b4:21:15:99:09:60:9b:d0:70:a2:e8:f5:8a:
ed:da:b9:f6:77:e8:a5:88:b7:c0:07:45:0b:4d:e3:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.114.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8253
Signature Algorithm: sha256WithRSAEncryption
25:27:c5:3d:88:49:f1:79:37:8b:bd:39:2b:85:e7:2c:25:e7:
d8:7b:db:e5:79:c7:8f:a0:7b:fc:e4:6c:4d:13:13:2a:26:1d:
7b:c1:fc:15:97:0c:de:02:6d:b3:9d:93:a6:ac:9d:86:32:d8:
e4:89:64:d2:8b:d3:e0:52:36:56:53:2f:78:5a:db:50:0a:6d:
ae:1c:fb:33:e6:4d:f3:9d:4b:1c:f1:4f:87:57:a1:db:88:17:
9a:16:df:62:8c:81:f3:14:ff:58:57:d7:1a:e2:07:d7:cc:46:
94:43:52:87:68:e9:5b:1c:b0:29:cc:1e:a2:56:35:1c:d1:a4:
76:ef:8f:3a:2e:46:d7:0b:1d:c1:d9:15:ef:1b:b6:2d:22:fd:
9f:da:d6:1a:b3:f7:11:2c:b3:91:47:7d:a7:80:27:0e:e1:30:
aa:b5:90:d4:0b:4b:3b:94:cc:d8:80:22:fb:a6:f4:14:fc:bf:
27:60:7e:6c:52:1d:e7:61:95:a7:8b:71:af:47:32:19:8f:b1:
0a:8c:a5:4f:ff:72:38:47:c5:24:6c:89:89:00:92:4b:d9:ef:
8f:60:a7:a8:69:b3:5c:30:31:7c:0c:46:9e:a8:35:97:cf:29:
07:54:e5:99:7d:68:50:46:f9:8f:83:1f:80:b9:09:e1:91:fd:
a7:b3:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:11:48 2024 by rpki-client on console-fra.rpki-client.org