Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer (raw, json)
Hash identifier: zWPN6j2x/Ulm3SiV63tv/EKThClwEVxG+gFm6dXyBnY=
Subject key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCFBE5A24256CECCE57203563C8D335C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jan 2024 14:33:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9120
AS: 211633
AS: 213054
AS: 215782
IP: 80.70.8.0/21
IP: 92.43.88.0/21
IP: 185.221.244.0/22
IP: 185.238.192.0/22
IP: 212.97.136.0/22
IP: 212.97.144.0/20
IP: 2a04:3f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 01:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:be:5a:24:25:6c:ec:ce:57:20:35:63:c8:d3:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 14:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:9b:93:29:95:08:56:72:2f:4c:b3:ce:89:
bf:aa:2f:7b:fb:13:5f:6b:96:16:02:1f:64:8a:74:
6b:f5:a4:ec:82:7f:e4:d4:4f:6e:1c:dd:35:78:33:
15:85:c6:a6:fb:d2:af:f6:18:3f:8a:c9:af:ac:f4:
45:f7:4b:ca:4d:c9:cb:73:21:b4:30:ee:42:d9:37:
a2:7f:c9:9e:21:63:43:65:74:7d:f4:98:a3:c8:5d:
75:7c:b6:84:79:b9:d3:e9:59:b1:83:3d:7f:9e:23:
dc:90:e7:4c:0b:da:b5:ec:5d:b7:56:01:86:65:54:
df:1c:3f:89:a6:f7:2c:81:ea:a3:bf:ca:f4:30:dd:
01:f0:3f:40:8a:40:b7:d8:a3:5a:1d:28:60:71:a7:
51:3e:92:98:2d:7a:d6:97:27:7e:08:af:14:58:e5:
a3:8f:fb:ee:27:ab:08:7c:37:3a:ad:b6:a3:2f:a2:
0b:ce:39:2f:34:47:f1:d7:a0:c8:20:6c:52:58:fb:
89:11:fb:4f:9b:83:24:89:39:d0:1c:75:0e:db:a2:
f1:46:aa:70:5e:53:dd:3d:fb:f2:0b:ba:e2:64:b9:
21:7b:22:32:8d:b4:f6:46:55:26:cd:fa:b3:48:67:
e9:20:c1:78:74:12:18:95:e1:f1:83:db:54:a5:3f:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.244.0/22
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9120
211633
213054
215782
Signature Algorithm: sha256WithRSAEncryption
10:1d:01:12:01:ff:77:1e:03:29:a6:8c:dc:fe:ca:03:c3:22:
72:af:40:dd:59:2f:c1:4d:5e:1f:f4:60:16:da:1e:7e:50:2a:
83:15:fd:b6:b4:af:51:19:8d:31:dd:a0:56:e3:93:38:fd:29:
7c:66:3f:8d:e6:ac:3a:63:b1:9f:41:3f:88:e3:38:4d:75:bb:
51:5d:30:4d:6b:68:e0:40:b9:a0:16:df:fd:60:4c:c7:b4:5f:
00:c8:17:2f:68:38:2d:e4:a9:e1:e8:8c:ef:66:75:e1:8c:66:
86:1e:98:0d:3b:2b:cc:5d:4b:39:b5:b5:f6:e4:d6:e1:c8:30:
c0:30:cb:6d:ec:b6:60:3f:21:d5:4b:8d:c0:ee:9b:57:31:ce:
5a:ef:36:21:ba:9e:12:d1:fe:0d:e6:fe:ed:3e:62:03:04:49:
c1:b8:5e:ef:22:d9:64:3d:50:4c:67:44:70:fb:e9:57:29:25:
8d:33:c1:11:60:93:1b:0f:43:fd:93:99:36:aa:bd:3c:fd:be:
06:3d:4b:a9:3b:80:73:22:c0:c2:18:25:f4:27:da:f0:e0:17:
f7:c0:27:e1:06:f0:c7:6a:17:99:e6:0f:cf:c3:fa:1d:7b:54:
ef:d1:31:a9:76:84:1a:b5:e3:82:47:04:7a:90:56:b1:8c:fd:
22:70:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:29:00 2024 by rpki-client on console-fra.rpki-client.org