Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.cer (raw, json)
Hash identifier: NMrYe7qqZXlQ1sNSyWX1KQd762F1tvQj0Y2WNgiZ/Bg=
Subject key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF039D5FB584AFA08B10E573246F32B64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Feb 2024 14:58:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42320
IP: 77.72.112.0/21
IP: 2a02:a70::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:39:d5:fb:58:4a:fa:08:b1:0e:57:32:46:f3:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 14:58:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:86:c3:64:8c:80:51:b9:c1:19:54:69:41:
e2:03:17:12:2f:6d:26:a8:84:4b:1e:fa:91:47:bf:
92:b9:62:2a:96:67:e0:c7:70:45:6d:6f:fd:90:29:
44:6e:c2:ee:78:f6:93:74:d9:d7:ca:83:00:d4:51:
3a:49:1c:88:b6:ba:ad:86:ff:5a:9f:fd:ff:1a:42:
1d:93:08:6b:9a:e6:4e:90:28:03:cc:2a:36:fa:54:
53:6f:37:d2:f9:04:b7:98:52:ab:07:8c:4a:8d:30:
7a:53:cf:c3:26:8d:ec:63:c2:17:f9:d6:77:ae:89:
33:9e:e2:32:59:79:a9:c8:0a:a8:4b:d7:45:2d:77:
12:22:5b:1b:76:0c:b8:9b:43:b2:47:21:ad:86:da:
60:c1:a5:d6:ad:27:c3:eb:e0:41:ab:18:8e:97:c1:
60:61:61:b2:c7:79:82:26:13:35:99:90:04:90:d7:
c2:9d:c2:2a:6c:d4:82:e0:21:df:95:c0:2e:f9:3c:
45:c6:9d:38:ae:1d:81:37:e2:fb:4a:4f:be:78:cb:
72:79:c0:a5:5b:85:e8:da:65:7d:38:28:b4:10:2b:
14:2d:d0:ed:22:d7:f5:e9:e8:2f:63:12:3b:a4:a7:
ed:f3:79:64:3f:8f:93:cd:38:98:41:ff:b8:7c:eb:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.112.0/21
IPv6:
2a02:a70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42320
Signature Algorithm: sha256WithRSAEncryption
09:b5:b2:77:40:67:77:da:a9:6c:cc:59:4c:72:0b:e3:84:6b:
89:b1:c6:51:79:17:19:47:d6:56:d4:46:54:76:08:ac:9f:d6:
be:83:db:31:87:1e:9c:1f:1d:43:6a:47:03:f0:c8:40:5c:af:
f0:1d:46:b7:94:8d:88:cf:4c:f8:74:16:fd:bd:9b:72:a1:aa:
54:c7:5f:df:25:71:37:5a:37:44:b5:a9:40:ad:25:b6:a2:c0:
1b:e6:fe:82:ad:53:7d:f3:98:aa:84:bf:e5:e9:6e:c2:0e:d1:
53:12:f4:0a:6e:d7:a6:2c:28:d9:7e:96:b7:04:67:e8:20:a8:
e3:ab:e9:72:d8:da:4f:7d:e7:09:37:40:7c:57:56:eb:fc:27:
38:5a:d3:b5:a9:eb:dc:29:ae:e0:71:fd:46:5e:32:a8:d7:54:
8b:4f:2a:93:25:ec:ea:a7:22:d0:b5:6e:29:47:eb:7c:c0:65:
22:7d:78:dd:2c:e7:25:61:5e:51:1e:ac:36:48:87:f9:28:0d:
5b:05:2c:a1:84:f2:64:fc:dd:e4:41:ed:3c:db:d1:9b:da:22:
b9:c5:77:9f:52:cf:db:90:0a:60:9f:f0:24:d0:f7:4e:59:bd:
70:78:0d:aa:62:84:4c:30:70:a2:ea:d3:17:4f:69:bd:4c:10:
74:87:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:34:14 2024 by rpki-client on console-fra.rpki-client.org