Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.cer (raw, json)
Hash identifier: 6jCf+C/tJgzBoo8kaBxtAVioEHo9veRJxAtDuRhGY9c=
Subject key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801F54522AE5BB143D79011DBD3083D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35343
IP: 193.47.136.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f5:45:22:ae:5b:b1:43:d7:90:11:db:d3:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:0d:27:0b:a3:66:2b:96:c1:f1:da:1e:ee:
da:78:20:6b:a6:6b:7a:fc:47:b0:f3:d1:13:89:2a:
21:f8:87:65:d8:fe:a8:a5:4e:51:81:1d:4c:9f:cc:
b7:3a:dc:07:e3:21:ff:5c:10:be:44:3a:ff:f4:ff:
94:5d:ee:00:44:b1:7d:77:9e:63:ba:4f:b7:a8:4b:
d6:23:4f:11:57:55:b9:fd:a0:69:2f:ba:b1:dd:75:
23:5d:6c:90:95:3c:68:2d:ee:b9:21:e5:f6:fc:37:
c1:1d:b1:cf:1a:c3:e0:a6:8d:82:61:da:65:47:be:
be:3d:38:5c:0f:16:a3:3e:31:f2:aa:11:6b:9a:6b:
8c:64:dc:8e:15:84:1a:e8:37:a2:43:13:7f:73:e2:
64:50:fa:f4:9e:91:70:52:a1:9a:75:22:db:44:69:
10:b0:c1:30:6d:49:39:07:d2:31:c7:9e:68:fc:6b:
8f:ca:d9:8f:85:ac:16:17:a3:6c:9c:8c:90:fa:e2:
d3:c7:60:b3:fa:53:99:ff:32:5d:fc:e1:27:54:4e:
25:69:4e:a2:82:22:a1:23:3b:a3:aa:8a:71:9e:c8:
66:2c:21:41:f9:57:71:ae:63:e6:c8:f1:ba:02:b2:
ba:2f:74:5c:72:13:b8:7b:64:9d:bc:93:ae:aa:0a:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.136.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35343
Signature Algorithm: sha256WithRSAEncryption
47:59:2a:a8:5f:75:db:44:ce:39:20:59:83:31:20:ac:f7:b6:
b6:52:10:7d:c2:81:3b:44:7f:78:22:5a:52:f1:c6:f4:6b:a6:
76:98:cb:7d:b0:53:97:ea:27:d7:9e:dd:5b:eb:f3:0f:88:25:
47:9e:19:23:07:79:e9:9c:e4:26:6e:f1:af:7c:38:92:1c:95:
4e:8b:32:57:87:44:18:e6:a5:1a:e3:18:b9:0a:aa:0e:42:ff:
e9:d2:4a:62:ba:3e:ad:de:bb:ec:23:06:d7:1b:c7:4c:b1:8a:
4e:97:e9:b5:18:6b:73:1b:fb:c4:d0:31:58:e4:ca:02:7c:cb:
fb:39:ec:fb:46:d9:f2:7e:de:83:8b:38:2a:80:8d:83:75:3b:
3b:71:6f:0e:a6:51:d0:34:45:fa:b5:e3:91:1e:0f:b2:7c:f3:
54:f4:46:1e:1c:a3:64:1c:96:de:33:4a:86:ae:b3:66:9b:2c:
20:78:34:fb:32:01:f2:78:02:b1:a1:83:f1:bc:9a:0a:b3:32:
1b:8f:0a:9f:1b:8d:42:34:b8:56:e5:ea:7f:6f:d6:33:26:50:
4f:91:f4:e1:e1:96:48:b0:9d:66:88:6b:be:23:93:67:15:d5:
8c:d2:ae:fc:99:27:c8:39:79:af:da:ac:38:1f:28:95:44:a0:
bc:c4:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:36 2024 by rpki-client on console-ams.rpki-client.org