Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer (raw, json)
Hash identifier: hbfFnTf8KXXufjVcN6WhPD57HYioWbdoTYlDxnapDwI=
Subject key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E44600748427ADF017E327C9A2F11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12561
IP: 46.31.8.0/21
IP: 195.238.68.0/23
IP: 195.238.78.0/23
IP: 2a02:4980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:44:60:07:48:42:7a:df:01:7e:32:7c:9a:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:93:ce:5f:fc:c7:a5:cd:c1:98:4d:ab:4f:
33:da:e9:1a:1b:74:cf:f5:03:96:ad:00:81:25:e6:
6e:5e:77:0a:a6:78:5b:2d:fe:db:eb:5f:22:97:8d:
15:8a:1c:ed:4b:86:0e:c2:e3:4d:91:6b:fc:f1:00:
72:89:c3:a2:1f:bf:14:66:3a:d8:06:99:67:7b:4b:
a2:f6:18:cf:51:c5:71:2d:a0:16:41:c6:12:1d:c9:
0d:96:d7:86:63:b2:28:f5:2c:d2:29:5d:ff:cb:43:
2e:93:8c:8f:bf:66:ee:9d:1f:32:1e:3c:66:ba:93:
a3:0a:fb:16:9b:fd:ab:cb:db:38:72:98:5d:eb:aa:
da:68:12:b1:8a:02:c6:a1:26:f0:fa:38:e3:c2:a5:
fd:b7:68:87:a6:ab:27:2e:2e:93:91:7c:02:a2:bc:
45:35:54:a7:32:5f:fb:b5:b0:fd:33:b0:fd:ec:b1:
ce:67:7e:71:e1:51:47:37:06:12:8e:47:8b:92:f6:
64:b1:e3:9d:b4:99:44:3d:c6:5c:be:5d:23:9f:19:
4a:89:3b:33:40:ff:52:49:01:57:56:12:ed:91:a8:
92:35:6a:67:e8:63:8b:a1:1d:83:b1:7a:f5:d0:dc:
cb:90:7b:f2:fb:9a:cb:75:b2:ba:97:cc:87:e7:1a:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.8.0/21
195.238.68.0/23
195.238.78.0/23
IPv6:
2a02:4980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12561
Signature Algorithm: sha256WithRSAEncryption
55:1e:c6:71:95:0c:aa:00:0a:69:78:02:9f:71:41:49:e4:20:
af:6d:54:de:8d:c5:07:55:76:79:4f:90:6f:bc:d8:74:44:f7:
33:c2:27:5e:85:cc:e1:74:63:23:86:c0:8e:0b:a3:a4:24:fd:
2d:08:d3:03:15:6c:d7:d1:42:d1:3a:7b:4f:19:9b:1c:c0:51:
f7:ad:30:40:77:8c:21:bf:6b:3b:e9:6d:02:f5:a9:56:e1:db:
fb:88:9c:d2:0c:fb:70:ff:78:23:04:b3:35:6c:92:18:d5:28:
9e:89:28:a5:47:7a:af:91:d5:eb:5f:98:29:a3:e6:33:d2:b2:
01:45:59:47:4c:b6:69:06:80:28:9e:ee:fd:0f:87:e5:e7:66:
3b:b1:e0:63:32:be:6e:de:fe:f5:07:d4:f7:3c:2e:23:59:08:
9f:d1:af:1d:5d:19:84:96:74:e3:a6:ae:99:08:76:7e:d2:45:
93:45:66:89:4e:f0:4e:7f:c1:a7:ff:9d:5d:58:83:a4:f3:ba:
81:a7:81:3e:92:72:32:5f:9d:77:73:61:70:0f:c2:d0:bc:e9:
27:fc:dd:fa:92:fa:04:3a:5c:a9:10:64:d6:9c:02:b8:26:ee:
bf:cc:fd:a4:0b:7b:c3:b5:4c:9e:e0:06:97:4e:26:52:0d:0f:
00:c1:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:09:49 2024 by rpki-client on console-ams.rpki-client.org