Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
File: EJsFo11BCaHkqDTMrazdLG9WsFo.cer (raw, json)
Hash identifier: 2YD5koCYlPllu/YwIgPLO0c+et8op8/fZNyrL6PbtwY=
Subject key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B85ACC1ADC63FA6E66EE31C2A0761B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.139.40.0/22
IP: 2a07:13c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:5a:cc:1a:dc:63:fa:6e:66:ee:31:c2:a0:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:25:b1:4f:ee:fc:fb:b5:a2:3d:3f:7e:ad:
61:a3:c3:a9:d4:e4:8b:1c:70:84:a0:cb:52:b5:62:
5a:d1:f8:87:9a:bf:79:06:73:1c:a8:af:18:10:b9:
30:c5:73:fa:90:7f:32:ae:e5:d7:57:76:15:ae:7a:
a3:f6:f4:b3:98:b6:bf:da:0f:4b:18:fc:ec:3f:e5:
db:5d:7b:9f:3f:88:b9:18:2a:d0:9e:c1:db:21:ce:
4f:23:f4:4d:67:2a:80:00:28:a2:b0:8a:d5:1e:94:
09:4c:18:8c:71:3f:a0:0c:c1:8a:73:e3:2c:92:0f:
cd:66:0c:b1:7b:3a:43:09:15:27:90:41:8e:99:53:
64:c5:90:8f:79:c1:d1:18:73:05:89:6e:9d:3b:d5:
f0:3c:9d:4b:5a:fe:e9:63:b3:53:cb:d3:a1:0b:74:
3d:d6:97:45:fe:24:bb:10:77:cd:a9:c8:6f:b3:68:
18:58:a7:91:46:8a:d5:62:90:b0:a7:73:e8:c0:ee:
ef:cf:af:ec:71:59:5b:c5:48:22:e1:74:6e:c7:8b:
0c:3d:c7:9d:a6:b2:5e:68:0d:9d:22:4c:90:54:7e:
87:b6:81:78:b5:c7:45:e0:8f:85:12:e5:af:6f:ad:
5f:23:74:06:9e:db:50:64:58:bd:15:c4:5c:33:ca:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.40.0/22
IPv6:
2a07:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:92:de:be:4f:01:f2:01:1d:3c:6e:d7:84:14:2a:e4:c8:cd:
38:26:11:85:88:ff:08:02:3a:f6:9a:b1:db:00:42:fe:ae:9b:
cf:36:27:6e:32:f1:da:4a:de:d2:d0:91:e7:a2:92:dc:4a:ce:
80:14:d1:fd:82:f0:ed:81:e0:2a:5c:fd:6b:35:06:7e:6f:16:
6b:dc:8a:63:d3:c8:2d:b8:82:8b:5d:b9:b7:1a:3c:bd:35:e0:
e0:6b:02:7e:4d:97:b7:06:b9:5a:6d:2e:f0:27:05:f8:18:9c:
30:e6:6e:36:67:91:ca:58:f9:72:d9:00:c0:0e:bb:9a:90:ff:
46:80:f8:92:3c:1f:51:4c:43:49:4a:b0:ae:ff:33:38:20:64:
f7:17:15:53:86:8e:17:19:4e:df:c1:45:fc:6f:a5:56:a1:3b:
d5:78:07:94:55:b6:19:7c:62:cb:db:bb:c8:5f:45:80:58:1e:
1b:6f:cc:d3:2b:40:0a:78:ac:08:ce:f7:9e:f9:bc:36:3f:58:
55:b2:30:6f:9d:b0:20:3f:24:c3:7e:eb:62:a9:59:1c:b0:de:
45:5b:d2:ef:2e:fc:7e:69:4c:7a:6e:1c:e7:61:1b:87:16:1f:
cb:82:ea:aa:c3:f5:ee:c6:7a:b6:f6:d2:82:7d:35:d1:d8:14:
47:d5:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:41:37 2024 by rpki-client on console-ams.rpki-client.org