Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
File: B7egwbq9Yh6CINDXd4d6hEtBPBA.cer (raw, json)
Hash identifier: dBbRyGVyl6J6ImznFbHG6vyqkPHhqaVGoiKx2dMjKLU=
Subject key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953C7A75EDEEEB475E8AB8C3D9C60F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.203.2.0/23
IP: 193.203.16.0/23
IP: 2a0f:e280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3c:7a:75:ed:ee:eb:47:5e:8a:b8:c3:d9:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07b7a0c1babd621e8220d0d777877a844b413c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:47:8b:02:1c:2f:aa:8f:b9:af:68:59:ea:
70:26:94:01:9b:86:5f:2d:9f:fd:0b:85:a2:be:82:
7f:f6:b7:1d:2c:5a:25:1b:61:15:4a:41:6b:54:b5:
d8:f5:5b:0c:ab:45:c6:d7:98:93:41:d3:0b:b7:d3:
c5:76:e1:82:94:c8:f1:ae:4e:91:94:9e:8f:e2:b6:
ce:0c:94:9b:ee:30:26:b1:59:c0:54:f6:99:40:21:
54:6e:20:b2:e1:ce:d8:76:a4:3b:57:ae:61:dc:13:
b8:33:cd:9c:8d:70:41:91:5b:55:c7:c1:d0:eb:6d:
7d:52:5b:5a:bc:5e:d8:95:54:eb:5a:17:87:4f:f8:
62:5e:07:fa:c9:02:03:4f:a0:01:7a:b1:fb:68:28:
1a:45:3b:bf:2d:50:a3:c0:d0:d7:a1:6e:2c:f3:45:
22:e3:77:09:bc:3d:55:20:a3:d7:4f:d2:56:9c:b9:
d5:06:0a:86:04:73:ca:4a:ac:16:c3:15:bd:21:2c:
90:f6:79:56:e0:12:37:c6:05:4f:bc:3c:ce:98:12:
e3:20:11:1f:71:43:f8:82:37:d6:0f:70:b7:48:be:
22:df:46:ae:07:88:ed:97:7c:97:2d:ee:9b:a3:a2:
34:c0:25:7b:13:90:56:aa:ef:9d:b6:a4:fc:76:04:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.2.0/23
193.203.16.0/23
IPv6:
2a0f:e280::/29
Signature Algorithm: sha256WithRSAEncryption
60:10:c6:2e:e8:f9:19:3f:c4:42:30:fc:39:97:75:f5:8a:66:
39:f2:14:81:6c:0d:47:81:88:2a:5a:6c:ef:eb:61:16:54:40:
13:01:17:f7:d1:d1:d3:2e:6b:a4:6c:23:90:2d:f9:59:a1:c4:
53:7c:10:81:3e:61:14:23:a7:b4:0c:d0:f5:fa:1e:3b:79:39:
d4:73:c9:cd:76:08:40:32:94:e8:67:d3:3b:9e:8b:04:58:34:
46:3d:93:5f:76:95:2b:09:80:f0:19:bd:07:50:20:9c:c8:54:
bb:47:72:79:3b:3b:3f:db:c2:10:4d:3f:24:5b:51:fe:ca:d7:
09:78:8f:33:c2:71:65:d8:9b:a4:2c:0c:2a:99:ea:51:50:05:
5c:c2:06:01:3b:85:74:c8:2b:2f:59:5a:d2:e8:4f:33:2c:4f:
2a:ac:c9:77:e8:1a:39:5d:8d:bd:cd:f9:b4:52:6e:57:b7:95:
24:e0:1b:39:35:7e:9a:8e:8c:25:73:12:1a:4b:d1:2d:77:96:
99:f1:d1:ee:78:53:c3:2e:d1:0b:25:dc:a7:2c:39:cc:e8:db:
eb:02:4a:94:0f:9d:14:f0:96:7a:89:6d:a4:ec:66:96:3e:64:
d3:e1:7d:72:6c:08:d4:f7:d1:b9:14:f0:eb:cd:62:2a:88:05:
61:f0:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:08:43 2024 by rpki-client on console-fra.rpki-client.org