Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
File: EVFSIzgprv1GebUUcXmN68mCN-8.cer (raw, json)
Hash identifier: X4rvy9/NNSSB2R5xoyaYENnUPRWrH5SE11opJUad4mA=
Subject key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE83695D49769C86D0D7F69A2D5EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212337
IP: 2001:678:92c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e8:36:95:d4:97:69:c8:6d:0d:7f:69:a2:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=115152233829aefd4679b51471798debc98237ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:cf:31:e2:49:e2:d9:8d:79:4e:c9:24:d2:
52:9c:e8:39:98:c5:6b:a7:dc:51:f5:33:46:6e:28:
fa:f4:b5:ba:e6:0d:1e:f5:d0:3c:54:95:f7:7e:a8:
73:df:99:5a:6a:98:22:ae:d7:65:6f:95:45:9f:73:
82:40:1e:b7:33:63:46:51:3c:9c:41:c5:5b:68:01:
f3:8c:61:95:ac:43:85:05:a6:be:02:6d:0b:91:fa:
e5:c0:7c:2e:6d:70:64:89:13:4e:86:31:b6:1b:9a:
39:15:d4:a8:b5:be:c9:50:1e:9a:ca:8c:88:fa:d6:
f0:d6:eb:69:dc:72:cb:c9:6f:98:40:31:ef:ec:0f:
2b:a4:8c:74:5f:ad:71:a2:fd:20:41:fb:3a:7d:7e:
43:f0:8a:3a:fa:14:61:49:8b:b4:85:86:79:fd:65:
29:3f:af:40:8b:a0:b4:ed:6f:27:84:07:70:bd:46:
26:6e:12:51:5a:70:11:80:3d:3d:6b:e1:3f:af:fe:
b8:c4:e5:84:b8:6a:95:d8:e8:18:de:97:39:18:09:
6e:6f:ae:04:50:70:2d:3d:99:7b:82:e3:86:2d:b9:
53:7a:d6:7d:fb:13:c7:bb:79:51:82:29:8b:2c:31:
bf:80:0a:4c:2d:7b:11:c1:d7:00:c2:d4:17:c9:c2:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:92c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212337
Signature Algorithm: sha256WithRSAEncryption
95:47:bf:07:b7:74:86:56:5a:39:45:17:3f:b5:07:51:ef:a0:
ad:48:f5:0f:95:32:8a:23:78:64:33:38:f7:0f:68:e8:cd:5e:
30:a1:98:41:b5:3b:88:5b:50:3b:cb:62:c7:cb:6f:81:cf:60:
92:8c:e8:c6:b6:7b:14:9c:c3:e6:f3:6e:75:c2:59:37:a4:52:
3b:1a:a9:ac:74:f4:07:7f:1a:76:61:ae:cb:73:0a:4e:41:9a:
9f:ca:66:59:92:d4:97:6d:86:2e:8e:3a:11:d2:ed:9e:ab:39:
ca:c7:89:28:a0:71:c9:06:5b:c8:95:18:9a:34:fb:1c:2f:07:
ce:0b:0c:fe:ea:b0:d4:e0:fc:3b:c2:14:8b:05:b5:b2:77:fc:
ae:c1:d0:01:0e:32:9b:6b:44:76:70:c2:38:2b:a2:c0:dd:b9:
f1:9c:53:7a:cc:3a:e4:8a:c2:a9:49:31:bd:6d:51:a8:ce:d8:
1e:5f:cd:eb:3e:71:4b:a5:6c:44:1a:6d:95:e5:5f:7f:a5:43:
be:60:1f:e5:f3:d1:b4:7c:d1:c3:1f:2b:8d:df:3b:b9:bc:2d:
d6:6a:5e:f9:af:e5:5a:30:d2:a1:2c:b7:97:5b:d9:e6:3b:cd:
e3:06:94:23:c4:ca:c1:a4:aa:6c:8f:9a:b5:25:12:ef:8f:7c:
3c:2e:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:22:05 2024 by rpki-client on console-fra.rpki-client.org