Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer (raw, json)
Hash identifier: S+JfmCcK2MrX9V2UDiXDDCyWW3N96oZ/jis85Sjwd84=
Subject key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424787060D6FA18074BE626CFDF17F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61425
IP: 5.198.128.0/22
IP: 185.239.216.0/22
IP: 2a0c:6380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:78:70:60:d6:fa:18:07:4b:e6:26:cf:df:17:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:5a:ae:65:44:3b:4f:1b:5e:53:7b:2d:d9:
a6:27:5f:91:ea:7d:91:91:95:59:20:f1:54:25:ba:
0a:7a:ed:1a:2d:5f:65:8b:71:5c:8e:ac:3e:30:ad:
90:36:f4:79:43:6d:63:cf:a8:9b:bb:20:6d:38:f6:
e6:fe:ee:06:6b:a6:5c:26:64:7c:a0:4c:a7:cb:06:
97:57:b2:2a:c5:f7:a8:bd:08:a8:90:ff:53:68:51:
9d:fc:00:de:8f:ca:0a:58:10:44:3d:07:23:a9:f9:
9c:57:d4:be:14:d6:c5:a2:7f:74:81:4e:b8:79:70:
ae:75:19:ec:05:49:96:d0:7b:68:08:83:9d:50:3f:
17:e5:12:0a:2e:d0:21:58:8a:52:95:5a:60:97:b9:
db:db:ba:8b:08:31:0e:e5:ef:0e:ee:b8:4a:a0:7d:
d6:75:49:83:eb:3b:48:d6:13:de:83:5b:21:9f:59:
6b:0a:f5:ff:03:8d:28:61:0f:d9:a4:cd:3f:99:66:
b5:a5:f6:72:cc:95:d4:7c:09:de:48:93:b3:c3:6a:
f7:4f:45:39:26:c1:ea:bd:a0:69:a6:29:62:45:a3:
3b:47:71:e3:1b:03:f9:a2:26:a1:59:cc:c9:29:e5:
2b:67:64:ce:fc:8e:72:7a:37:2b:ba:35:58:df:b4:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.128.0/22
185.239.216.0/22
IPv6:
2a0c:6380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61425
Signature Algorithm: sha256WithRSAEncryption
a3:83:82:0c:ee:9f:17:25:62:94:81:03:c6:5c:45:7c:fd:76:
64:e5:bd:64:79:86:d8:bc:3e:bd:0b:78:2c:9d:e9:4a:ee:91:
b2:77:0b:34:a7:70:02:8b:4e:8a:24:ec:4a:64:2f:8a:72:d6:
9b:a7:ae:7c:a2:b1:5a:77:20:60:8c:4a:76:51:13:64:de:b2:
8d:30:03:65:79:3e:b9:2a:22:cf:f2:a7:7a:e6:2e:9c:98:d6:
24:c2:6f:d6:09:37:c2:e9:c9:f1:ff:1a:11:e8:c1:ec:c8:61:
3e:cd:15:e0:1e:2a:d6:ae:a9:fe:5d:b9:bb:61:2c:33:ee:05:
78:43:34:94:cc:ed:7f:6b:8f:8b:55:28:ef:2e:46:a8:e8:c2:
5e:91:53:79:f2:1b:86:11:24:44:a7:e2:f8:62:f4:a4:53:5f:
07:7a:4e:ff:e6:1c:7f:da:f7:0a:c3:0d:7c:81:a6:34:34:4f:
66:2e:e6:dd:c9:b9:c1:ea:d9:8e:4b:44:49:5f:10:a4:de:ac:
e1:d2:94:2a:2d:b0:70:eb:a2:f2:24:9c:9a:19:36:fc:3b:cb:
13:f2:74:37:95:9e:80:06:d2:2e:92:94:b1:e4:c6:cd:03:93:
ed:d2:b3:5d:24:35:4c:01:30:2d:44:f1:52:03:48:54:ca:d2:
79:a4:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:20:58 2024 by rpki-client on console-ams.rpki-client.org