Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
File: CNedINdqndsHW5T58ABSqyGCdrc.cer (raw, json)
Hash identifier: yOCNVEg03MezcKH3O3Rqi8OlH0KVLYHZfsph67yxKbc=
Subject key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019204F8108A52C42A6E1F3516E04F79B2AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Sep 2024 11:50:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8831
IP: 62.108.64.0 -- 62.108.87.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:f8:10:8a:52:c4:2a:6e:1f:35:16:e0:4f:79:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 11:50:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:3a:03:47:fe:c2:dc:8b:eb:20:e3:1f:b2:
62:0a:06:a9:a2:6c:04:11:44:86:db:bd:83:32:03:
30:b5:3f:99:d1:be:79:a7:25:b0:76:3f:86:2a:48:
80:d8:43:d7:30:fa:34:25:1c:a0:87:00:58:eb:4f:
11:88:8f:41:3a:7a:5a:07:4c:ef:fe:52:a3:3a:31:
61:f6:2b:a1:7d:59:ec:c5:d6:d0:3c:ce:e2:10:1b:
5f:cf:60:a1:a3:40:a8:45:60:5d:01:82:34:89:fe:
50:0b:04:6f:e3:4f:f1:07:00:36:5d:68:8c:5d:50:
dc:2b:b0:8a:6a:66:e4:1e:a0:70:d0:68:e0:d4:a6:
bf:df:60:b4:5c:cf:de:12:84:58:07:17:e0:31:44:
d7:98:cc:f7:a9:3a:5d:c2:a3:f4:82:f5:03:e8:e8:
b7:93:75:92:8e:7b:59:65:f7:ef:de:ef:0d:ec:ac:
13:b7:6f:23:bf:a3:03:aa:a8:01:8e:40:00:67:83:
81:65:30:8d:be:95:cc:60:fc:a4:c8:8c:b4:91:2e:
db:c3:f2:87:d1:11:32:e2:ad:e5:de:8d:24:d8:54:
e1:02:8f:78:c7:b2:13:36:54:01:78:46:1f:08:e9:
de:30:e6:07:83:ea:bb:72:3f:29:2e:43:19:c3:ca:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0-62.108.87.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8831
Signature Algorithm: sha256WithRSAEncryption
5b:35:f1:0c:00:20:d5:f7:ae:32:ec:95:ce:8c:d3:4a:3d:d5:
a3:b0:1a:37:c5:34:e0:93:5a:a6:b2:cf:68:3e:85:a7:81:a7:
83:2c:77:e7:d0:26:e4:56:c1:16:2b:a6:f9:d1:a8:23:92:11:
e4:96:75:dc:6c:ae:96:89:02:57:11:18:ff:6c:29:39:a3:10:
96:44:53:80:21:f4:c9:25:fb:9f:c1:78:aa:75:8b:93:6f:57:
7a:13:5e:ee:c7:45:16:0f:ec:31:e3:4d:96:6e:73:2e:e8:b2:
6b:ce:b9:ea:08:f4:2c:d1:c5:eb:85:e2:47:fa:db:78:e7:a8:
99:7f:ac:eb:8b:80:c6:ee:b8:91:dc:2c:13:f9:24:b8:5b:77:
66:78:df:b4:e2:e3:e5:cb:35:a5:80:fd:73:97:02:a4:b9:5d:
93:d4:79:51:ae:03:54:d1:db:e2:a1:f3:0f:1a:b4:ad:99:dd:
fd:2b:48:7c:0f:f7:42:28:76:c2:24:e2:9a:64:6a:37:5f:9d:
3b:67:ba:3f:2e:b1:38:b9:6c:e2:9e:5e:f1:fe:e4:96:ed:e8:
02:76:e7:de:f9:6a:27:30:b5:a8:8e:fb:75:ed:1e:78:66:06:
1e:24:8f:f1:c1:79:85:b2:38:30:4f:3a:28:af:b2:f3:2e:d3:
a3:96:7c:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:54:25 2024 by rpki-client on console-ams.rpki-client.org