Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer (raw, json)
Hash identifier: uW1Ge8mziq6B13WBsUoMENN4rjtwGhEh6InCeOfRxkg=
Subject key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DF6154B5A0E07DDC6826F9447F17B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199354
IP: 185.19.228.0/22
IP: 2a03:ffc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f6:15:4b:5a:0e:07:dd:c6:82:6f:94:47:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:e3:04:93:15:cd:d1:4e:29:5b:f4:b1:03:
b7:e6:5e:ed:80:85:7a:76:a3:53:98:0c:45:31:58:
5a:c0:e2:b5:70:06:bb:fa:63:16:3b:09:73:4a:e8:
50:d8:46:99:09:c3:0e:b1:3e:67:4f:1b:0f:fb:38:
a8:ec:1d:04:bc:c8:f8:7d:b9:0b:0e:d5:d1:95:fb:
94:f6:bc:57:2f:8e:82:bc:ea:53:a9:a6:6e:63:7d:
34:7f:2f:7c:02:2e:b6:a6:fc:83:83:c9:98:6c:e8:
0c:80:28:65:20:1e:6d:cd:e0:01:94:c9:c3:03:b4:
0a:ab:43:15:d6:6e:ae:c3:00:82:5b:ca:fe:00:7b:
a1:7a:3b:31:6c:45:30:3d:6f:1b:3e:7f:37:61:bf:
63:48:c4:a3:f5:fd:a4:32:65:ab:85:0a:ef:93:b0:
fc:f3:58:83:0d:6d:d5:15:f9:b4:ff:f3:c8:e1:d0:
54:53:ff:cf:9c:04:71:06:dc:a0:82:27:34:d6:e2:
2e:a9:89:84:2d:18:09:ab:b5:51:92:86:3e:7e:a7:
a4:df:e5:d4:70:8a:45:49:e3:fe:7c:32:89:8a:88:
12:4a:e2:58:41:87:97:ef:89:62:59:4c:a2:71:fe:
f5:11:7b:fd:ca:82:4f:3a:79:5f:ce:e4:c2:81:73:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.228.0/22
IPv6:
2a03:ffc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199354
Signature Algorithm: sha256WithRSAEncryption
23:59:95:f9:81:95:dc:8e:a3:56:39:cc:01:1c:6e:14:0d:8f:
95:9b:d7:76:31:e1:35:47:f5:d1:39:b1:c5:08:9f:64:cf:41:
e8:12:4e:94:42:50:09:5b:47:60:97:47:ef:e9:44:02:87:3c:
dd:e2:8a:0d:e2:08:36:b7:28:a7:11:0c:5f:09:e9:00:0f:ee:
5b:9d:62:dc:d0:71:b5:04:1e:0b:25:0f:4f:ba:03:4c:0c:5c:
63:33:ee:25:b4:4f:31:c1:98:10:f8:3f:af:48:c2:b3:ad:85:
06:f6:87:6e:87:77:44:a4:a6:74:58:82:87:fe:1b:a6:3f:e5:
53:3c:7d:62:6d:89:1e:cb:79:5b:f7:f3:49:3d:ff:32:da:7d:
92:7c:c3:79:b2:10:70:a3:1f:97:9a:ec:2c:4b:c5:2f:cc:8a:
27:c6:b1:fc:51:bb:90:ed:fc:ec:30:b4:57:22:f3:18:7c:ec:
42:f5:7a:5f:2d:82:eb:24:f7:53:1f:d1:85:80:d8:e1:7c:67:
c2:fd:1e:4b:fd:46:81:9e:1a:f3:6d:e5:09:ed:2a:97:c9:4a:
44:3a:d1:59:2b:5a:95:c9:52:97:5f:e2:b6:8c:43:35:bf:92:
c8:12:bc:22:92:f6:5f:51:2b:2a:88:a3:1a:1d:5b:bf:a6:a7:
08:8c:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:11:48 2024 by rpki-client on console-fra.rpki-client.org