Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.cer (raw, json)
Hash identifier: hOf8WCbTeNf9GlbfVfnv+xrIIT9bCrQmMk9zJ2aZ2Ew=
Subject key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA96D21F0CA27F4455FA37B7DD039B9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:32:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208346
IP: 217.198.186.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:d2:1f:0c:a2:7f:44:55:fa:37:b7:dd:03:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:a2:82:f7:39:e6:ed:1c:08:e9:29:9b:17:
8d:1a:fe:73:2c:f6:08:73:0e:ce:d4:18:b0:aa:d8:
77:e1:20:12:1b:2f:6f:60:89:f4:73:81:d6:26:32:
92:3b:b7:40:93:cf:c1:ab:b3:31:31:a1:41:1a:a4:
78:a4:65:46:e3:8e:a5:7c:bb:e3:45:70:e8:33:bb:
09:b5:67:32:db:ea:bc:74:be:ce:56:08:1d:d8:7b:
e0:74:56:d3:ed:a2:fa:f8:b6:c7:2f:b8:6b:32:1f:
2c:a3:9b:b3:d7:72:b1:2f:eb:ea:5f:b3:6c:df:44:
4b:db:ed:99:95:3f:3f:e3:58:0e:82:f8:e0:68:a6:
74:95:43:31:49:f4:d0:c6:98:40:6a:09:c7:ef:5f:
9b:08:34:38:e8:8b:4e:ac:77:00:2b:46:14:37:c8:
e5:e7:41:93:ac:d0:2d:ca:be:cd:80:88:82:4a:f8:
5c:40:13:7d:72:d0:62:bd:8f:fd:14:8e:b9:8e:19:
0e:47:a3:97:9b:e0:9d:3b:2a:3e:09:82:5f:a8:b5:
9d:d7:8c:ba:8d:5c:2e:44:01:a7:2b:9e:ec:0f:79:
5c:72:73:1c:9e:39:50:ba:f1:72:56:f0:86:80:a8:
19:24:04:28:5b:b6:8c:63:e7:cb:14:c4:38:ee:ff:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208346
Signature Algorithm: sha256WithRSAEncryption
8d:c7:00:9c:de:e4:c2:18:d1:91:b1:54:08:2e:dd:63:a5:b8:
35:b4:a3:92:4f:18:ff:fd:84:5c:1c:dc:f5:28:4a:88:cc:c4:
5d:1f:d9:d4:ce:4a:3c:05:49:8d:03:02:01:8e:8d:81:5b:e4:
88:ee:a8:90:1e:72:e9:f4:92:84:2c:71:ea:91:3a:73:4d:28:
45:b9:c3:e5:e4:ce:d3:a1:5f:9a:45:22:47:5c:2a:65:04:f8:
76:88:a2:a5:e6:f2:dc:3f:0a:53:ca:e7:c9:92:a0:0a:71:ee:
10:09:c7:61:99:ea:e9:48:ff:e3:3e:ac:86:10:b0:ba:b4:16:
9e:d3:51:ca:48:7b:54:56:f4:ef:bd:8d:ca:4a:f2:5b:8b:ce:
0b:e6:e2:8f:64:b6:4b:8f:fd:02:5a:b7:ef:b6:93:0e:2f:d1:
8c:db:7a:ce:52:3f:50:30:d6:44:43:ba:8f:16:b8:a3:b7:08:
75:48:0f:99:fc:f3:9d:96:ab:e0:e5:8e:42:be:af:15:98:9e:
81:bc:66:e7:59:4e:b9:74:95:77:62:7b:82:b2:66:fc:94:d3:
63:c9:4f:76:21:b3:1b:c9:c1:a4:07:e6:32:a5:01:be:81:e5:
24:0b:b2:3e:f2:fe:87:cc:be:76:e4:b6:9b:3e:b1:96:58:a3:
b2:cd:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:54:09 2024 by rpki-client on console-ams.rpki-client.org