Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
File: E6-mzmVC4btSPh0DvQCk0it_2u0.cer (raw, json)
Hash identifier: M595tOGyMquGYur7KXmxCp4skYXMOZ5hxh5wrwzl624=
Subject key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E56FC610011AFC61B58DCBF00EB4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211417
IP: 185.144.92.0/22
IP: 2a03:a920::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:56:fc:61:00:11:af:c6:1b:58:dc:bf:00:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:22:b7:e7:e5:36:d4:2f:1b:a0:1e:c6:bd:
86:a7:a0:12:af:88:67:bc:b6:30:fc:aa:b0:0a:86:
8b:fa:f7:b4:6a:cb:90:27:43:d6:00:c1:f2:d0:a2:
56:1c:96:24:5e:81:04:3a:49:56:5e:35:66:9b:ac:
35:1f:3f:d8:bb:35:79:58:97:38:ad:64:85:78:c0:
67:86:b3:bb:6a:49:63:8f:65:11:5b:f8:97:4b:de:
50:46:90:1a:02:a7:81:57:15:71:b0:11:1d:40:22:
31:19:a2:f3:68:bd:9b:c7:c1:88:1c:e3:ec:19:54:
af:c9:7e:de:87:3b:38:90:7a:ff:6a:31:dd:6d:af:
06:a8:ec:14:7d:21:43:60:dc:0e:55:43:1c:0f:0b:
4f:66:d8:8e:fd:e4:d9:ed:eb:91:07:0f:46:45:f1:
78:27:6b:01:20:de:8c:54:98:35:8d:e4:30:82:03:
b1:f1:87:f9:8a:2c:49:fc:33:ae:82:6f:e2:98:99:
6c:d3:c4:a6:d6:35:48:d0:1f:fc:c0:65:3d:a9:c3:
6a:1a:11:59:60:a7:07:56:ec:03:1a:ba:cf:a5:0d:
4b:47:de:85:f1:07:69:f7:d3:7b:9d:cc:49:bb:d2:
c4:9c:46:6b:7c:0b:78:77:22:0c:75:ac:5a:91:95:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.92.0/22
IPv6:
2a03:a920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211417
Signature Algorithm: sha256WithRSAEncryption
31:ef:c6:e1:a5:d8:67:5c:71:fb:55:1d:b3:65:3d:0e:cf:b4:
c8:b6:fe:c0:71:ae:87:ae:b7:20:d2:cb:61:98:d1:85:94:a1:
3a:b4:8b:e1:87:c8:b5:5d:aa:6e:cf:3c:bb:7c:cc:4d:de:3a:
72:8f:14:4c:d5:46:28:bb:9a:45:de:8f:72:bc:23:71:eb:d5:
86:3d:47:a4:8d:38:1e:93:e4:d2:cd:f6:b5:4d:1c:41:77:a9:
2a:1c:04:41:d0:c7:15:30:29:ac:83:e3:59:d4:41:98:a2:59:
38:75:cb:bc:62:ad:65:44:88:73:58:ed:ac:09:eb:36:38:09:
bb:6d:78:0e:21:6e:a1:b8:25:ca:33:56:f8:d3:58:e8:09:c5:
bb:49:98:2a:a7:de:b5:c6:61:0f:44:9e:0f:ae:bf:ef:e5:cf:
75:64:4e:37:69:69:e4:fc:4e:b9:80:66:34:bb:fb:6b:7e:2e:
a6:a7:6f:94:ef:d6:6c:18:83:dc:76:66:68:54:54:2d:2b:ca:
bd:81:70:9c:18:78:36:76:b5:e5:b7:77:f3:aa:8a:02:b4:70:
cc:1d:17:e8:82:03:1b:1a:8f:e0:8a:9c:cd:83:1e:8c:4b:47:
5b:d1:b7:a9:42:2f:84:4e:61:45:b4:b9:8d:39:82:4f:f2:8c:
b8:69:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:06:09 2024 by rpki-client on console-fra.rpki-client.org