Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.cer (raw, json)
Hash identifier: suH4Br+8uI0oNL+gpF2BM94qlce/L/vK8+b/MHf0WIg=
Subject key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B93ED51B6E9F7F8E0BDDCA1A2834CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201749
AS: 209193
IP: 93.191.112.0/22
IP: 2a06:a540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3e:d5:1b:6e:9f:7f:8e:0b:dd:ca:1a:28:34:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:49:29:98:07:32:c1:12:69:7e:74:07:8e:
9a:53:30:ed:b7:c9:9d:c6:3f:eb:e5:87:78:58:00:
3b:67:86:6d:87:d9:de:5a:2c:b7:f7:2e:83:f1:74:
0b:b4:ed:fa:0f:f5:3a:33:fe:3d:c4:ad:03:78:c6:
f3:94:92:62:27:30:01:10:43:e5:24:2c:1c:a2:17:
cc:f3:35:fa:86:04:e6:3a:32:17:e8:d6:35:1b:36:
6e:2d:ea:fd:1d:7d:3d:87:07:8c:98:ec:d3:9a:d7:
69:16:37:12:fc:62:b4:1b:c1:3c:64:07:64:3f:ab:
84:e4:97:d6:7d:f6:32:aa:df:b7:a9:51:7e:b5:6a:
cf:9c:a0:3b:6a:6f:fe:86:33:aa:b9:1f:84:2f:d6:
a1:85:58:8a:a3:f4:41:c8:9b:16:b6:ab:e7:d1:5b:
2c:11:b3:6d:bf:9d:18:cb:5a:b4:0d:75:2b:82:53:
6e:94:43:c8:ba:f5:0f:0e:d6:13:84:44:bf:da:2e:
ac:f3:34:48:0d:6d:33:6e:c9:c4:b0:9c:c9:a3:3c:
b3:4f:da:3d:22:94:f2:40:2c:2e:c7:20:56:4d:34:
14:3c:87:de:a6:f6:3b:98:54:1a:72:a9:24:9e:89:
29:bc:ee:1b:9f:cd:df:90:81:02:72:c6:76:6b:41:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.112.0/22
IPv6:
2a06:a540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201749
209193
Signature Algorithm: sha256WithRSAEncryption
30:e5:06:c3:66:3d:b9:fc:49:71:96:c9:d8:0f:fa:0b:84:15:
a6:38:18:9b:39:38:27:d3:4f:fa:52:a4:a1:ac:cc:d9:21:14:
fc:ab:87:b2:31:2f:4c:4c:b7:a9:f5:51:44:ef:43:d6:d6:f2:
ed:62:71:e4:22:4a:91:b4:b3:1b:25:b9:01:c7:b1:84:86:22:
36:4a:b4:cc:b0:fe:88:cf:6e:1f:4a:6c:0c:06:18:3a:76:c7:
10:c2:b4:8b:61:4b:26:fc:f2:7f:37:4e:7f:87:c0:38:03:5f:
01:89:f6:5c:7d:6e:46:4a:f3:48:29:75:1b:10:22:6b:f2:6f:
dc:1e:88:6c:34:6f:f8:cd:6f:00:b5:5f:ad:c3:42:e8:9d:46:
19:e9:b8:28:51:cc:b7:04:a4:0b:1c:f1:0f:84:0f:5f:b2:74:
a4:c4:cc:8f:d2:9f:14:7e:fa:5b:93:89:ea:88:0a:d8:48:ed:
e2:67:41:16:2c:a0:eb:5f:da:ed:7c:2f:e6:d0:29:f7:8d:bd:
92:2d:b4:a2:9c:76:bd:48:04:bc:06:4a:07:ff:be:6d:f5:44:
f0:c4:ab:85:a7:55:0b:59:28:c3:9d:46:e1:6e:de:59:03:10:
1b:74:2e:6a:74:98:76:97:ee:bb:89:5a:60:6b:d7:a1:9c:c5:
5e:34:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:54:44 2024 by rpki-client on console-fra.rpki-client.org