Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer (raw, json)
Hash identifier: wOfMDOkBJ47olHkTLg65maOVA/9tzoZ0xl3RiVX+FPs=
Subject key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FBF9684687AFF10365B72694C925C281C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 May 2024 14:24:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213141
IP: 193.254.64.0/18
IP: 212.0.0.0/18
IP: 2a02:adc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:96:84:68:7a:ff:10:36:5b:72:69:4c:92:5c:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 14:24:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:b0:4d:1a:27:49:12:d1:74:de:34:b0:9c:
4e:de:58:71:f7:02:a5:94:69:70:b5:f5:5d:5f:4f:
af:15:b7:f2:ab:ee:dc:07:38:df:67:29:e4:de:f9:
d9:63:a7:e4:2b:7f:44:73:1d:2f:26:11:62:ba:91:
cb:0d:9e:c7:a8:00:da:48:04:6d:79:a3:78:c9:05:
3e:59:75:ae:58:27:a9:73:c7:ab:88:2a:1e:8a:e7:
20:a1:e4:e4:9b:9d:ef:cd:82:34:b0:8e:82:fa:e1:
9f:62:61:21:5c:89:b8:2a:0c:23:00:e2:8a:60:40:
a1:ea:16:2c:c4:42:67:59:5e:c4:a8:51:ab:44:44:
aa:97:cb:38:13:6a:6c:9f:a5:7c:c4:1c:e4:18:ff:
0b:38:6a:2c:40:91:1a:7e:28:3d:39:8c:68:3f:65:
fc:87:90:51:b0:dc:23:6e:9a:2d:76:65:89:e2:bd:
41:22:6f:b5:5f:9b:1a:61:fc:80:6e:44:77:c5:27:
dc:42:8a:dd:48:03:76:b5:e5:c3:16:48:14:30:ce:
5e:94:c0:81:32:04:4f:91:fd:de:d9:25:84:52:eb:
27:e0:ab:17:19:cb:ef:08:7d:7d:9b:c5:93:14:02:
9f:96:50:73:b2:2f:a9:19:0b:6c:5b:b1:ea:30:f2:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.64.0/18
212.0.0.0/18
IPv6:
2a02:adc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213141
Signature Algorithm: sha256WithRSAEncryption
ad:5f:cf:1e:72:37:ca:f4:92:d4:4d:be:9a:f4:1e:1b:72:1a:
cd:b0:b2:d8:61:c9:4e:94:c0:09:30:ca:3c:f1:2c:f0:ac:07:
3d:77:d9:94:09:39:79:e5:59:09:7a:00:8f:bd:82:5b:ac:e4:
c8:e3:96:78:53:2c:93:17:7d:c4:a3:52:e8:69:13:59:4f:f7:
43:d4:88:d7:e6:51:bf:3a:8e:fa:06:aa:99:ea:e5:28:e2:a8:
b5:a2:05:dc:87:c6:50:1f:70:4d:1e:5b:fd:0f:0f:36:9f:2c:
fb:34:d4:35:48:d4:05:15:31:aa:5b:c8:06:02:1b:fb:28:b9:
36:c7:20:1a:89:1d:d0:81:30:15:16:f5:d7:38:f8:28:8a:0c:
26:1f:87:f5:6e:be:15:5f:fc:08:32:90:ea:1e:47:93:66:43:
21:7b:1a:ba:4f:08:19:f3:ae:d7:41:23:45:7e:f7:17:06:2c:
1f:8f:66:da:56:9e:70:46:a4:b4:27:f5:26:6a:ce:8f:da:b3:
ee:b9:67:fe:73:a7:16:e3:94:86:a5:c6:e3:ce:11:6a:f7:b4:
cc:4f:f4:d3:42:33:f1:60:95:97:a5:57:c1:a9:d0:3a:e3:08:
f4:1a:2d:7c:07:a3:36:a6:79:f7:33:3f:95:63:3f:30:97:6c:
9e:e3:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:18:10 2024 by rpki-client on console-ams.rpki-client.org