Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
File: CNedINdqndsHW5T58ABSqyGCdrc.cer (raw, json)
Hash identifier: 8ECqtYwBKUoxFEA8jVTm22Sg1109yGV83O/IidgjmBc=
Subject key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E15A0EB33FC5BAF8EEE44416335F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8831
IP: 62.108.64.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:15:a0:eb:33:fc:5b:af:8e:ee:44:41:63:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:3a:03:47:fe:c2:dc:8b:eb:20:e3:1f:b2:
62:0a:06:a9:a2:6c:04:11:44:86:db:bd:83:32:03:
30:b5:3f:99:d1:be:79:a7:25:b0:76:3f:86:2a:48:
80:d8:43:d7:30:fa:34:25:1c:a0:87:00:58:eb:4f:
11:88:8f:41:3a:7a:5a:07:4c:ef:fe:52:a3:3a:31:
61:f6:2b:a1:7d:59:ec:c5:d6:d0:3c:ce:e2:10:1b:
5f:cf:60:a1:a3:40:a8:45:60:5d:01:82:34:89:fe:
50:0b:04:6f:e3:4f:f1:07:00:36:5d:68:8c:5d:50:
dc:2b:b0:8a:6a:66:e4:1e:a0:70:d0:68:e0:d4:a6:
bf:df:60:b4:5c:cf:de:12:84:58:07:17:e0:31:44:
d7:98:cc:f7:a9:3a:5d:c2:a3:f4:82:f5:03:e8:e8:
b7:93:75:92:8e:7b:59:65:f7:ef:de:ef:0d:ec:ac:
13:b7:6f:23:bf:a3:03:aa:a8:01:8e:40:00:67:83:
81:65:30:8d:be:95:cc:60:fc:a4:c8:8c:b4:91:2e:
db:c3:f2:87:d1:11:32:e2:ad:e5:de:8d:24:d8:54:
e1:02:8f:78:c7:b2:13:36:54:01:78:46:1f:08:e9:
de:30:e6:07:83:ea:bb:72:3f:29:2e:43:19:c3:ca:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8831
Signature Algorithm: sha256WithRSAEncryption
5b:a0:82:a7:c5:e7:20:c7:e1:24:b9:7f:c5:22:75:f5:e6:27:
73:84:42:19:99:08:e1:d6:f6:33:c9:7e:25:4f:6d:61:32:12:
75:eb:a5:c9:1b:37:60:6d:cf:ca:a8:61:df:d1:58:d3:f5:1b:
da:fd:94:4a:b4:18:39:c8:d3:dc:cf:a3:0f:17:98:0a:64:e3:
8b:92:95:23:d4:35:4b:f1:4c:9a:31:b1:01:ff:b3:89:74:42:
53:b7:07:7d:8f:a6:a9:f7:7d:0d:7f:d3:fc:28:0f:03:7d:f5:
a1:a7:66:5d:6f:4c:a1:1e:e2:ad:3c:c1:84:24:25:ee:6d:7e:
84:bf:1b:6d:8b:8d:f3:c7:fa:14:da:14:9b:59:46:7a:3d:43:
c2:06:23:7b:30:e6:de:d1:c5:7d:2b:01:cb:9f:c0:1a:34:ca:
d3:d2:5e:c5:d4:a3:a7:ba:a5:8a:33:74:70:4f:53:d2:65:ea:
a2:d7:08:f4:3b:89:0a:6c:c2:ac:00:d6:eb:fb:9c:f3:58:bf:
a5:7c:94:e3:19:22:fe:8a:a3:04:10:a4:79:87:91:cd:eb:5e:
6f:16:1e:cf:2a:d0:a6:da:e1:f6:49:64:6c:f6:d3:6f:8b:35:
f4:61:0b:5c:fd:13:39:d8:ea:42:cc:af:2f:9f:42:19:8f:6b:
22:cf:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:11:03 2024 by rpki-client on console-fra.rpki-client.org