Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer (raw, json)
Hash identifier: uEkBZK8P1AaIm14mgLHj1sk66Ut9PMR8y37PvMXmhus=
Subject key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2BB2F4C43A5FBED753F2063DBB82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60246
AS: 206680
AS: 211282
IP: 185.1.72.0/24
IP: 2001:7f8:a3::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2b:b2:f4:c4:3a:5f:be:d7:53:f2:06:3d:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77c7b457f9af042924142373ce090f7fa876257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:f0:58:69:dc:89:15:dd:4a:f0:85:5d:5a:
49:76:28:d8:7b:e8:da:f4:df:2a:e5:b8:08:fc:b5:
19:24:00:b8:61:0a:53:42:8b:47:8f:4a:67:16:33:
3d:12:f3:b9:71:86:a2:86:81:6f:c5:a9:0e:e3:8f:
6c:c1:2f:f4:32:91:7a:1f:90:38:0d:6f:98:bf:fe:
85:01:4c:f0:b6:91:16:05:8a:1b:ef:46:8f:34:01:
1a:5a:66:de:cf:05:32:06:e9:1a:0c:88:6b:c2:49:
01:88:ba:b0:e7:89:c5:26:2a:76:cf:bb:ec:0c:78:
8d:48:18:29:bc:a7:58:85:37:c0:82:42:62:83:d6:
de:4f:04:24:f9:20:10:f0:7b:a8:81:57:6f:57:3e:
ba:f3:6a:d2:cc:09:b3:cd:14:ca:0f:55:4a:fa:3e:
7e:78:d5:2f:fd:46:1f:1b:bb:20:57:e1:9a:b1:1d:
a3:dd:d2:56:15:53:cf:a3:f6:50:3b:07:30:0e:b2:
0a:5e:1e:8c:d5:11:98:0b:74:2a:20:51:8e:3e:e5:
33:e8:4a:9a:0b:b1:96:c1:06:b1:d8:c6:c9:c4:58:
9c:dc:66:38:fa:5c:cc:32:24:c0:4a:83:03:9d:eb:
ce:a1:4e:e3:5d:47:1d:ca:0f:5f:22:e3:02:72:a4:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.72.0/24
IPv6:
2001:7f8:a3::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60246
206680
211282
Signature Algorithm: sha256WithRSAEncryption
0c:d5:08:85:3f:1d:70:3c:fd:2a:ad:f1:5e:8b:9c:b1:a4:de:
74:f8:0e:5d:1e:8f:89:6b:7d:4d:b0:b5:0f:9a:93:44:b5:98:
42:71:be:bd:12:f0:7c:0e:a8:ae:12:20:d2:ab:2e:4f:61:4c:
91:32:88:65:06:4c:15:e5:98:4f:99:38:00:76:2e:de:ca:5d:
4e:f2:48:3a:1e:57:15:45:4c:79:1e:ab:44:4e:6b:46:3c:fd:
2b:2a:ca:52:ca:d4:5a:d0:ce:18:38:fc:fe:60:6b:de:e0:3d:
5b:a2:20:e5:57:12:77:b5:c1:f4:ca:3f:96:ce:fd:ff:4c:86:
b2:fc:57:06:00:2e:db:e5:cb:1a:1e:19:57:e6:eb:0f:26:a9:
c7:36:fc:a3:07:89:67:41:ac:74:ee:32:b6:e6:82:5c:99:fe:
23:58:d2:30:cd:ef:48:8e:53:2d:6f:3b:69:61:ee:7f:8f:02:
87:2e:1c:81:b1:22:f8:6e:69:a0:05:63:4b:e7:df:41:6f:e6:
ca:a0:4c:60:2e:5a:64:5f:65:29:8a:8f:0e:da:a1:ca:a8:6c:
2d:a5:d2:2c:12:bf:b1:7e:b9:7d:94:bb:07:fd:c0:a7:c8:4f:
c6:ca:04:f4:3c:34:d3:79:2a:56:7f:75:e0:2c:1c:9d:51:0e:
a5:29:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:53 2024 by rpki-client on console-fra.rpki-client.org