Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
File: EH99C2TJjJno0IaDUFJk1rCL_YY.cer (raw, json)
Hash identifier: Z1/Vne3Rbddn6kQZ1+eueTMNbgbVsPNWhqOR8V5IaYI=
Subject key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49392D365315D0E7E17B254CC0CAAA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57707
IP: 171.25.220.0 -- 171.25.222.255
IP: 2001:678:88c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:92:d3:65:31:5d:0e:7e:17:b2:54:cc:0c:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:81:8f:48:5b:69:1c:09:c6:c5:e8:c6:a2:
62:00:4b:9e:45:03:6c:e1:a1:7b:00:9a:90:fa:7e:
89:85:2f:e2:be:f1:ad:8f:e4:4c:6f:d3:2c:fd:1b:
d8:27:86:3b:15:b1:70:6f:02:3c:c1:27:9e:94:87:
6f:7f:17:a5:14:b1:c3:8c:c1:be:fb:20:88:97:da:
1d:5a:d2:ad:7b:93:c9:07:cc:29:73:97:bd:2d:2d:
8b:ea:2a:f3:c0:73:ac:23:fe:c2:0b:ac:00:a9:d2:
28:21:96:d7:e4:02:ea:91:61:a8:72:6c:4d:b7:f6:
ca:02:09:38:c3:27:91:a5:2d:21:c4:47:37:fb:a1:
1f:fd:03:1d:55:a3:a0:33:5d:72:a7:e4:b8:c8:9d:
bb:05:40:7d:80:27:a6:10:9b:ef:3f:1f:68:50:0f:
51:3b:54:a5:3f:f5:df:88:5b:42:0c:35:12:ba:d3:
1a:00:4e:1e:63:c0:b7:8b:66:01:ec:48:28:6c:1c:
08:9b:98:62:9f:ed:44:63:40:1a:17:00:c3:ab:03:
8d:da:16:6c:1e:19:98:a5:50:42:5e:5e:34:36:8b:
4a:be:50:94:a4:81:56:10:43:3b:57:a5:0a:43:87:
ee:ab:8f:a1:9f:72:31:3a:18:08:05:cf:c7:df:f1:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.220.0-171.25.222.255
IPv6:
2001:678:88c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57707
Signature Algorithm: sha256WithRSAEncryption
99:bb:42:ed:ce:fc:ba:81:13:15:9a:89:62:48:0f:ab:12:5d:
ef:ca:0a:43:9a:04:cd:a1:84:f7:43:47:b7:43:f6:ca:38:b8:
98:f2:d5:6d:47:e0:38:48:36:e1:16:fb:eb:ed:83:48:7a:a1:
08:1e:01:2c:32:de:b8:4b:62:21:80:20:a1:08:e9:97:56:6c:
e0:9a:91:0a:79:49:79:bb:5c:1b:c9:63:ff:06:be:dc:84:4f:
09:8a:99:7d:e5:c0:db:4f:f6:c9:ef:34:05:30:1a:6d:f2:ba:
ba:72:89:a5:2b:d9:86:70:4e:98:60:ab:68:7b:4e:e5:3a:55:
c2:c2:bb:7a:91:a5:42:de:80:0d:8a:31:0e:08:5a:bb:8e:8e:
99:c5:c9:46:5e:a3:d0:c6:cd:fd:c8:37:5b:d6:66:3b:63:35:
8f:e3:81:bd:61:bb:36:dd:f2:e3:23:ad:0c:de:3c:bd:bf:dd:
8a:01:c8:d5:d6:e8:33:31:9a:94:3d:3a:b5:ca:cc:3d:00:aa:
be:7c:69:10:f9:61:90:2a:bd:a1:53:0f:20:26:89:de:ca:3b:
20:84:70:92:37:9b:82:8a:2e:56:a6:d0:ca:1c:7c:b7:c1:85:
54:5f:a3:4b:bb:b0:9d:a0:3d:11:a5:2e:98:22:00:50:0e:63:
59:e2:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:22:22 2024 by rpki-client on console-ams.rpki-client.org