Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.cer (raw, json)
Hash identifier: vi+4cl2wkYbxcgiIs/QfV9SuilWxcdWvHnsyZRPrXOo=
Subject key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CD406E406FAC8E92A4DD95B5684D4D1AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jan 2024 10:31:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43171
IP: 46.175.224.0/20
IP: 185.59.108.0/22
IP: 2a02:6ae0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:06:e4:06:fa:c8:e9:2a:4d:d9:5b:56:84:d4:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 4 10:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:d1:52:4f:3a:ff:10:b7:a5:e9:e1:9b:8b:
44:13:aa:7e:70:ad:bb:3a:64:36:d0:4d:b5:9e:3f:
07:86:36:3b:8e:c9:93:23:00:24:c0:7a:f1:eb:0f:
7a:8c:71:f2:11:26:a8:e0:b4:96:c2:6f:8f:d6:23:
54:63:45:db:e7:c1:cc:43:ee:cf:15:cb:c8:90:83:
77:46:0e:bb:fc:ef:e8:4c:91:3a:3a:34:ad:45:cd:
67:49:d3:78:17:23:65:f1:e9:df:95:71:74:1b:16:
a6:85:96:7a:24:00:25:41:29:8f:1e:a6:b3:ed:7f:
10:59:59:b5:25:e0:43:46:3f:9d:8d:de:4d:71:95:
01:f0:1a:6a:7b:94:eb:32:25:a2:ab:73:27:bc:8f:
e4:65:f1:14:a3:96:92:ae:31:1d:a5:ad:04:28:9c:
5a:89:05:7a:d4:23:cd:c7:4f:77:99:65:73:e8:56:
dd:59:ee:c0:b0:6d:ab:04:ea:50:ff:5c:ff:d1:3a:
91:20:61:3f:f9:1a:64:72:99:35:a5:cf:77:d9:05:
fe:67:96:c9:da:ad:27:04:fa:ae:5f:ac:c1:d8:f6:
c2:3c:97:4a:da:01:44:4c:17:04:6a:b0:8e:89:f3:
b5:6a:25:52:21:58:84:62:3a:70:c2:0f:40:7c:fb:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.224.0/20
185.59.108.0/22
IPv6:
2a02:6ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43171
Signature Algorithm: sha256WithRSAEncryption
12:dc:c2:c4:c5:27:cc:85:58:e6:46:d8:31:5f:b1:06:cc:19:
61:67:d1:dc:22:f3:9f:2b:56:22:cc:82:5e:fd:29:9d:f2:de:
4b:ab:16:25:7a:4b:d0:87:52:ee:e6:c0:f2:6b:57:2e:6e:68:
e3:48:c7:4b:17:d1:0a:3b:d3:47:51:dd:16:25:74:81:b4:ca:
ea:f6:84:65:fe:70:65:be:a2:a1:f9:a6:18:59:d2:13:bf:9e:
b9:ac:3d:30:9a:06:21:e3:e7:b6:e2:fc:65:ec:8d:1e:7a:df:
4b:4a:c5:47:0a:66:03:78:bf:d3:6c:04:70:12:19:87:81:91:
07:78:03:a0:85:7a:27:24:d0:88:b6:51:be:0c:2a:88:68:76:
21:38:61:ed:4b:77:d1:04:af:40:75:56:59:69:02:94:db:50:
0e:02:a6:9b:f8:e5:09:67:8c:77:c2:50:ed:07:af:ff:28:68:
6e:ab:85:59:59:e5:31:3f:30:25:ae:fc:11:80:d3:10:fb:4a:
8d:1d:67:30:e5:9d:89:c8:9b:4d:5f:84:34:cc:be:15:2b:a4:
fa:cf:07:0a:9c:65:7d:d0:f1:66:53:68:a0:8f:38:58:17:f9:
b7:56:0a:ab:7b:1c:79:4d:f9:10:92:58:e6:ac:c8:a2:79:40:
c2:5f:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:46 2024 by rpki-client on console-fra.rpki-client.org