Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
File: EPm9HHFv0ulaydYQddcJYhroBgA.cer (raw, json)
Hash identifier: 49jKJxV6IPoYJGqJeC1E5dSNlMhyT7RdYkHHbYc5X4w=
Subject key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BFF4A25AC0993E3D7FEFEA9609A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42621
IP: 77.105.64.0/18
IP: 185.138.48.0/22
IP: 2a03:9b00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bf:f4:a2:5a:c0:99:3e:3d:7f:ef:ea:96:09:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:b9:e4:89:db:00:12:2e:dc:09:fd:26:80:
2a:46:35:9b:b5:7c:c9:d7:ea:7e:b0:c0:61:59:be:
a7:7b:ba:7e:b4:9b:45:3b:8d:c4:76:e9:6f:11:7f:
2d:3a:32:43:6a:f9:81:ce:d1:d4:f0:b1:3f:93:cc:
ba:63:8d:55:71:33:15:e6:d2:f8:14:22:65:95:e6:
38:a1:4d:81:34:2c:f5:3c:96:f3:c3:e6:fe:78:ae:
6b:e2:7d:9a:a4:79:38:93:94:4f:09:a6:14:57:6c:
df:13:0e:26:ea:bd:00:ff:d2:ef:9d:9c:5e:e4:bd:
a3:a6:49:65:a8:1b:de:a4:cd:44:62:f0:23:26:66:
ec:6c:4f:4f:22:bb:69:41:23:f5:b0:7b:2b:d9:30:
c8:58:84:69:40:30:0d:49:18:0c:7f:5f:0d:a8:b6:
d3:61:48:7f:a6:5b:d3:95:9f:e3:7f:48:39:f4:f4:
1e:fe:aa:ca:80:c8:55:d4:55:c3:d6:e0:3a:da:2a:
3e:98:2e:fa:d3:4c:a3:02:f3:be:bc:f3:05:bf:22:
80:71:8a:3c:07:05:67:00:f9:7e:2d:f6:05:27:af:
94:62:4d:13:d7:b3:ae:86:47:95:3e:07:b3:f6:f5:
f5:11:0d:c2:93:82:69:b4:f9:c1:cc:4f:a0:c3:c7:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.64.0/18
185.138.48.0/22
IPv6:
2a03:9b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42621
Signature Algorithm: sha256WithRSAEncryption
46:3c:29:37:08:72:49:32:90:f8:c8:0e:3d:82:41:42:a9:4b:
df:b9:aa:8d:33:08:3f:df:c3:73:ea:9e:32:a0:31:88:12:b2:
55:45:95:9c:68:61:10:e4:06:62:1d:55:a9:05:91:4a:6d:f4:
87:ca:36:e6:49:6c:6d:92:ab:3f:34:a7:39:e5:40:36:e3:f4:
af:58:da:dc:e4:f7:b6:60:cf:5c:f7:1c:3a:d3:21:c8:5d:09:
83:72:86:20:e4:88:78:b8:3c:87:4a:fc:a4:79:f9:7d:f8:a8:
ce:2d:f1:e2:93:fc:2b:e1:06:52:87:90:9b:3f:f8:38:49:8b:
37:65:41:61:6c:e0:1e:4a:ad:17:ce:65:3f:e6:9d:02:c6:82:
43:70:b8:88:30:1e:10:96:79:9d:7b:df:ce:2f:3d:ae:85:de:
3e:9d:fc:91:c9:91:d5:d1:96:08:fe:d3:58:b3:42:d2:7a:59:
6c:7f:b3:4d:47:c9:ca:2f:40:d4:f2:61:dd:22:39:d7:84:62:
19:0e:ed:9f:0a:e2:ac:88:7e:2c:42:4b:94:ff:9c:99:57:28:
81:1d:9e:72:78:51:53:a7:43:ce:4c:a7:4a:02:8b:65:6a:2f:
4c:1d:78:9a:08:5c:ae:fa:be:b0:ff:96:d9:69:7e:f8:65:0a:
f8:a7:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:24:44 2024 by rpki-client on console-ams.rpki-client.org