Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer (raw, json)
Hash identifier: tPajozehzAVQtNVqOOl11a/hQokfhW5S0ERi3mDzH2g=
Subject key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7F8C83AEC7AFB3E870864BBE5FD11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31438
IP: 83.137.64.0/21
IP: 212.89.192.0/19
IP: 2a0d:5f00::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f8:c8:3a:ec:7a:fb:3e:87:08:64:bb:e5:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:8e:c7:52:db:0c:91:15:c0:9b:70:9d:d6:
84:bd:9a:83:db:aa:18:bc:c2:39:20:f7:72:7a:8b:
4c:87:5f:f9:70:e8:c2:a8:c0:7c:e3:3b:ed:c3:20:
cc:0e:5c:ea:e7:06:3b:43:41:b6:95:81:0a:cb:c0:
29:49:60:f7:e6:b8:70:72:4c:20:1c:bf:8d:19:58:
6a:ed:9d:60:21:e7:45:40:30:06:32:36:ca:3a:fd:
90:30:ba:d4:5b:31:fb:a0:3e:60:b0:ad:8e:05:9d:
6b:5f:ba:93:77:5a:b5:cc:53:4c:2f:71:21:8a:c0:
a0:58:e3:b3:9b:bb:c2:c0:1e:7d:48:fd:4b:e9:f3:
65:c4:03:c8:57:46:87:c5:d1:bc:a6:61:23:ce:bc:
cd:54:db:33:8b:1b:4b:29:f2:af:10:76:27:02:16:
ef:2e:14:da:38:d6:6d:60:0b:62:0d:d1:79:7a:7c:
21:81:b4:f6:a6:8d:8c:72:c3:51:9e:17:e2:2c:a6:
bd:31:6c:71:c1:14:04:52:f8:6a:af:c9:db:15:5f:
91:03:6d:aa:52:15:06:c8:2b:6c:34:b9:ce:78:e4:
8b:f0:b5:14:27:46:43:4a:fa:75:a1:53:c7:bc:99:
11:52:dc:09:8e:bb:ed:53:49:18:78:54:2a:0f:47:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.64.0/21
212.89.192.0/19
IPv6:
2a0d:5f00::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31438
Signature Algorithm: sha256WithRSAEncryption
77:54:d3:71:3d:1b:a6:c3:28:d0:38:51:ed:58:cd:45:cc:a9:
40:89:84:40:82:20:97:f5:22:fb:1e:3b:34:ea:b6:d4:e5:30:
56:fe:9c:92:5f:8a:a8:d5:5c:c2:c7:d1:8f:a4:78:06:6f:90:
7c:36:32:50:9f:05:ed:50:e5:93:72:0c:ce:60:e2:19:a3:3e:
d0:07:d4:97:de:c4:b2:95:b8:ed:c4:c5:2d:30:e8:50:32:56:
ae:71:f4:ef:00:fc:62:e7:4d:34:14:f0:6e:80:a1:7b:cd:86:
23:e9:0f:bd:93:21:03:83:10:b9:d5:79:6a:b1:38:52:f2:08:
5a:14:3e:f9:24:ad:e4:c0:ce:5d:c5:fd:61:9a:1e:b0:72:dc:
b8:0c:28:f7:33:e9:70:3f:e2:21:74:68:e4:98:b4:a4:f9:30:
b9:05:a4:0a:7c:db:c4:79:dd:26:b2:99:2e:c1:20:57:4e:f2:
bd:c1:66:03:f5:9a:58:08:03:2f:e4:33:11:9e:3d:ef:b4:a9:
39:ed:3c:65:91:d7:e6:12:d9:f4:1c:5b:5d:0f:59:49:18:6f:
ea:4c:86:0f:9c:12:5a:78:f1:ec:9a:b1:5a:fa:68:16:21:a9:
3b:7b:01:cb:e4:34:ed:4f:df:28:9f:32:66:15:46:1f:e4:71:
2e:43:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:39 2024 by rpki-client on console-fra.rpki-client.org