Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
File: EzzXwanHnILu5chqQjwXwdY8NBM.cer (raw, json)
Hash identifier: 0SLHGIwP0XAsP8iItJ2EoPib7qTq5vgexxdH+GGhz24=
Subject key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50013521BAF4641CC62CEF03C59E4DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.44.0/22
IP: 2a02:7ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:13:52:1b:af:46:41:cc:62:ce:f0:3c:59:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:e6:76:27:81:a6:9a:2f:21:d5:ea:41:c2:
65:cb:72:d4:e2:2b:7d:e0:f1:be:4a:b3:2a:43:1a:
4e:f0:8d:ec:5d:84:29:4c:23:c4:4a:80:60:b6:6e:
45:b1:e6:e6:3d:8c:2e:2c:c8:9d:15:85:b5:07:e8:
89:ad:69:2c:05:c5:b2:82:8f:6c:09:b3:72:ed:65:
13:65:2b:28:f1:e2:45:0e:a9:5a:3e:18:4d:fb:cb:
c6:5a:66:13:2f:b4:3a:16:73:d9:f3:3e:ce:42:56:
fe:7e:b1:99:7d:70:39:e0:f5:10:18:bf:8d:45:8d:
60:de:5b:a5:6a:6a:fe:f4:2e:7e:b8:5b:e6:6a:3f:
4e:58:11:a0:6c:36:7f:7a:a3:79:73:56:b8:db:42:
17:30:a6:39:ac:c0:7d:bd:b1:02:4c:bd:55:b3:54:
08:1c:40:69:33:98:31:a8:f0:18:29:d4:7f:ff:bb:
f3:4d:30:c0:b8:12:9e:5f:93:fc:3a:27:e0:03:53:
f4:2a:46:db:7f:b4:5c:e8:b9:c9:92:92:07:e5:0e:
69:96:ea:da:ef:b6:1a:dd:57:15:d2:9c:8a:6a:05:
21:e8:e2:3c:b2:4d:c3:d4:6e:14:63:85:50:6f:31:
ae:c0:9a:75:0e:f6:6b:54:fa:be:c9:4e:1f:54:05:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.44.0/22
IPv6:
2a02:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
96:03:7b:cc:1f:c2:32:ea:a1:26:99:58:cb:f6:7b:d8:ee:4c:
14:31:0a:e3:a5:b0:04:8c:5e:2f:5a:c1:c8:ea:1d:5a:6e:05:
83:37:c4:15:c2:4d:7f:8d:3a:8e:5d:f4:de:6f:50:2d:be:5d:
87:00:9e:d6:78:6f:aa:ef:e5:2d:91:cb:8a:c7:93:6c:9c:bb:
c9:42:0f:20:0a:c7:c5:af:ba:69:d3:5e:69:9f:8b:ce:b9:e7:
01:15:4c:93:77:d0:2f:01:ea:99:77:ca:e4:97:ce:79:b5:44:
0e:1b:00:ec:e0:9b:73:b7:a8:1c:79:db:2a:76:bf:f2:ab:2b:
b6:d0:e8:3d:85:f7:88:6a:6d:69:e0:ed:2f:5c:a8:4f:da:9a:
5e:0e:99:96:fa:28:a0:77:58:ca:38:bf:c8:47:ef:25:2d:ba:
6a:e1:b4:5a:4f:e8:b6:d8:5c:ec:2c:9f:b7:cc:43:77:a2:2d:
a0:51:79:2c:aa:cb:24:b0:33:fa:d6:ef:b5:e8:65:ce:af:58:
70:06:cc:79:d4:64:39:1b:b3:de:16:cf:33:9d:33:5f:78:19:
ea:b3:29:9e:14:e8:8f:2d:75:cb:82:1f:9a:6d:45:7e:92:ed:
52:9c:7f:01:af:56:ba:3f:c6:70:b8:8f:42:be:01:a6:08:39:
c2:90:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:05 2024 by rpki-client on console-fra.rpki-client.org