Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
File: DEd6vwon7eiG-8QkE9eonCJrEfo.cer (raw, json)
Hash identifier: ZlJU70q0UDfV6U8XTERUW84QQDjG18YvF+eUT9Dhbfo=
Subject key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FFB1468084439143175DC48803240
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213078
IP: 45.87.208.0/22
IP: 2a06:bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:fb:14:68:08:44:39:14:31:75:dc:48:80:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:9c:48:86:6b:61:65:af:cc:63:7b:93:99:
2d:db:22:a6:ce:b9:48:54:58:fe:b6:94:3e:4c:70:
4b:ee:fa:b8:f4:98:85:71:77:c6:df:40:7f:03:55:
ae:1c:37:78:e8:03:1c:b2:35:a5:67:54:67:7b:4e:
83:ac:f6:d0:a7:87:3c:e1:51:2c:8d:86:60:12:1c:
32:42:5e:a2:14:15:b9:7f:c7:1a:02:9f:7b:6a:38:
0a:8d:7e:a2:bc:e1:4f:1b:d7:6b:b2:ec:e6:3b:59:
72:e9:84:65:95:3b:3b:1b:a9:5c:e6:56:cb:26:49:
df:fb:34:34:14:6c:15:ce:10:95:5e:45:8c:78:51:
03:60:46:04:47:4a:5f:1b:8e:d7:77:f7:77:c3:92:
37:6c:65:f4:94:3b:e5:33:80:04:ab:fa:7f:69:d6:
7a:cf:89:f0:10:79:93:8c:16:d8:d1:dd:21:d6:a5:
97:59:a4:83:71:13:be:9e:5c:ab:67:34:9f:87:05:
1d:14:2b:69:b0:c6:50:9d:b3:fa:d1:a9:e6:4a:51:
7e:1f:20:15:51:8d:ee:0e:09:6d:cd:44:73:f9:6f:
1f:b0:99:5c:ef:c5:88:d7:1b:6b:0d:d9:db:f4:e6:
23:ec:39:29:bb:3f:6f:ba:ff:96:ed:95:43:3b:47:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.208.0/22
IPv6:
2a06:bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213078
Signature Algorithm: sha256WithRSAEncryption
79:11:40:7a:23:4a:29:18:fb:59:c2:1c:28:56:b2:2c:2a:88:
f9:35:6b:15:bb:77:2f:e2:20:6b:3e:65:91:6f:01:86:69:47:
dd:1e:43:93:08:a4:b1:7d:14:54:20:a8:3a:0e:54:e9:82:b6:
ac:89:43:63:99:fd:32:09:c8:bf:33:61:e2:4d:fd:d2:46:e0:
d9:cf:a3:c4:62:da:c1:e5:90:ae:ad:eb:4a:fa:6d:97:b6:95:
d2:51:b2:de:d0:7d:4c:a6:df:0b:1a:ee:62:a0:58:af:1a:24:
1d:e0:b4:c4:42:ec:8b:d6:22:9f:8e:2b:78:8f:b2:40:4e:98:
94:c8:65:25:d0:21:4a:43:0b:55:a4:87:53:d6:71:b9:2f:7b:
5f:5a:44:39:8f:69:c8:43:15:96:4f:3b:19:5e:de:31:2d:4a:
6a:b3:63:64:29:a7:1b:e5:ed:87:fa:b4:fb:7b:ee:0e:42:13:
94:f3:bd:86:65:73:5d:ad:08:2b:fc:a8:49:48:60:99:8b:b5:
ef:e1:79:78:15:ca:98:86:0a:d8:ca:76:57:de:c5:03:18:6f:
2f:c7:ae:4d:42:69:18:1f:b9:8a:dc:1a:c4:1e:33:d4:5e:20:
f4:96:62:87:34:84:10:55:0d:45:2e:a4:60:d9:ca:0a:8a:53:
36:48:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:54 2024 by rpki-client on console-fra.rpki-client.org