Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer
File: avKqUEvzdkSAPC7vFgTThgsd74Y.cer (raw, json)
Hash identifier: eQl8R4g+P+bbLYIg5bLee9XfUa0V0dpKo8j2iv1GVbU=
Subject key identifier: 6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEAABC48F28601C492E1EB74590AA14D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Feb 2024 13:05:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35455
IP: 45.67.24.0/22
IP: 2a09:b140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:ab:c4:8f:28:60:1c:49:2e:1e:b7:45:90:aa:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6af2aa504bf37644803c2eef1604d3860b1def86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:51:0b:07:91:a0:52:14:33:80:8a:dd:ef:
92:ae:9a:12:fc:76:6b:9f:b4:e4:42:df:19:29:02:
eb:30:4a:f7:a8:73:15:34:50:34:08:dc:97:a6:17:
6c:5a:ba:0d:6a:fc:20:26:20:69:bc:c1:c0:4e:fa:
03:3c:ff:ae:12:a0:44:4c:02:6d:37:3d:3a:cc:7b:
c5:ed:ca:f6:d2:7b:6c:2d:a1:f5:18:81:12:c6:99:
83:df:99:fa:3f:b2:a7:48:fd:50:c6:4a:03:cf:8d:
b8:e0:89:4a:07:3d:6f:81:b5:6a:3e:ef:0e:28:6b:
75:2b:5a:01:81:3f:d0:79:ba:b1:b6:db:94:09:d9:
6d:f9:ae:47:8d:cb:1a:bd:9e:b0:19:d0:47:69:30:
5a:f4:4a:b2:76:d7:69:64:bf:c2:f9:4d:57:20:20:
0f:39:b3:96:ef:0f:5d:d2:8b:04:3b:f5:94:c6:1a:
34:92:66:30:6c:8e:6b:1e:ab:90:1f:26:61:50:63:
2c:23:7f:bc:90:ed:a1:36:b1:05:36:6f:17:63:a7:
45:24:72:8a:5e:5e:29:ba:06:f1:6a:53:94:78:86:
b3:68:23:52:6a:06:7b:b1:15:74:14:7b:49:c1:dd:
1d:ae:df:7f:30:82:c5:0b:95:b6:e0:70:bb:36:93:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.24.0/22
IPv6:
2a09:b140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35455
Signature Algorithm: sha256WithRSAEncryption
0f:01:c2:07:76:a7:b5:82:6d:a7:39:61:42:5a:4c:f0:18:06:
85:a3:d4:37:44:1f:31:a0:a7:73:c5:60:f8:82:72:22:2b:99:
f1:71:55:01:3f:89:f9:7d:3e:2f:b4:a0:ed:06:ef:b3:d3:3b:
aa:dc:e7:25:a4:5d:be:f3:6f:83:cd:59:be:ff:ae:42:80:a2:
76:32:02:2f:ac:30:2d:2c:7f:86:7f:34:c3:c2:07:b5:3f:72:
94:3f:7c:05:8a:74:41:1a:d2:9f:1c:73:55:0a:c6:87:00:8b:
9d:39:8c:b3:60:0d:7f:7b:d7:3c:fb:f5:1f:c1:d3:86:d7:aa:
c7:8f:f8:78:7d:10:f1:1b:a6:e5:bf:c1:92:cb:35:73:19:43:
bb:df:ad:b3:a7:72:bb:1b:60:93:0c:96:6c:ef:84:eb:de:8f:
24:15:57:6f:98:07:56:a6:0a:a0:53:8b:23:14:c0:28:62:36:
b1:f1:9a:22:0c:35:28:e4:42:e8:c4:de:de:37:12:6c:50:76:
55:26:16:bc:47:0c:c8:0d:98:d7:7c:7f:b5:a2:ff:14:21:0e:
54:cb:70:4f:eb:9b:5b:49:03:5b:84:af:3a:78:9b:d2:03:fb:
b3:5f:cc:66:fb:8c:d2:b9:d5:dc:82:04:32:1e:b7:11:e8:24:
5f:d2:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:31 2024 by rpki-client on console-fra.rpki-client.org