Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
File: E_xd30njbWmTYwGtIr8kOkcbUkw.cer (raw, json)
Hash identifier: JdcEvcJLZIQJ9Zp59XLf9DaRwKCLfyOypA/+1zkuHFw=
Subject key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECBCA477148390689787F3692B3537B3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 06:13:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204478
IP: 185.11.168.0/22
IP: 185.41.76.0/22
IP: 185.70.68.0/22
IP: 185.108.244.0/22
IP: 2a13:4a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:ca:47:71:48:39:06:89:78:7f:36:92:b3:53:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 06:13:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:fc:e3:80:f4:57:e0:3a:89:7c:98:fc:eb:
ce:28:e4:76:34:00:c6:5b:25:a6:5f:c4:25:a3:5a:
64:03:1f:2c:b0:6a:58:27:12:47:71:2f:c2:bf:80:
65:4b:80:c9:96:7f:17:39:25:1c:b2:f6:89:95:f6:
10:85:e1:5b:c7:79:bf:38:7f:e8:1f:57:63:ea:de:
01:d4:88:c8:05:11:2d:6b:59:f6:a9:ee:14:c2:19:
ed:5e:fa:58:59:fc:a6:33:84:49:de:b8:73:b2:fd:
e4:91:fc:3a:23:8b:6e:1a:97:3b:2d:1f:bd:6b:8e:
b9:9d:10:f7:bb:f2:1c:b3:19:b8:d0:a0:cf:74:1c:
77:58:cf:0c:a1:f0:b5:1c:72:79:2e:45:91:01:7e:
f8:bf:42:53:c1:fa:49:5d:eb:27:cb:9a:f0:58:20:
7d:89:e5:18:65:70:f5:a6:a9:4d:8d:d5:82:51:f8:
d6:0d:55:d0:8c:e2:d0:c3:83:04:4c:19:a7:11:97:
81:80:9d:12:22:98:43:84:c7:b7:0a:68:00:60:ff:
4f:a7:40:4f:be:7e:2a:a7:db:43:c5:ea:98:a0:ba:
3d:1a:16:55:7c:2b:1b:3f:92:a8:f2:07:3f:9b:dc:
e1:0f:b2:c7:75:ef:9f:91:08:80:d9:41:ef:73:c7:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.168.0/22
185.41.76.0/22
185.70.68.0/22
185.108.244.0/22
IPv6:
2a13:4a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204478
Signature Algorithm: sha256WithRSAEncryption
a1:11:88:5d:23:79:7e:90:47:83:4c:88:f2:79:8a:61:bd:e7:
f0:90:c3:5a:c8:ae:fe:63:f1:8e:91:72:24:11:a1:5a:c6:9d:
d3:75:b5:2d:09:80:22:c6:85:b4:16:f7:1b:23:dc:9a:ff:08:
b9:cc:bf:13:25:af:84:3c:d3:52:d7:5b:15:c4:90:06:37:89:
e8:a6:79:51:2e:13:17:2d:e4:f6:68:22:49:48:ff:f3:bf:a7:
d0:cc:50:b6:77:37:72:d3:a8:c0:56:f4:9c:95:e1:a5:f7:d9:
01:b0:7c:6c:dd:58:9a:06:28:fa:b2:5e:0e:98:92:69:3f:bd:
03:96:7f:54:59:4a:a0:95:3a:6f:69:9d:de:6b:ec:99:36:d4:
85:9e:a3:4c:0c:97:fc:c9:b6:9d:72:33:d6:e4:5c:40:a7:dd:
a6:26:45:6c:ac:4d:fc:39:50:b8:37:f9:20:be:f7:6f:07:e5:
46:ff:56:78:6d:e8:09:00:8d:9b:40:0c:5e:90:cf:99:3e:6e:
67:a3:ff:9b:87:bb:c6:c1:ee:7e:ea:16:ed:f7:54:67:4b:fb:
9a:49:b1:3c:60:6c:c9:27:87:d4:8c:3c:6c:9f:55:d7:0b:0d:
23:24:a8:2f:8d:40:c2:ff:49:2b:60:47:16:b6:29:11:25:af:
04:dd:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:47 2024 by rpki-client on console-fra.rpki-client.org