Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.cer (raw, json)
Hash identifier: bSCyBF2AUrIm+t+n/l65tF5R5hrlkSp9oulZJnbB6cE=
Subject key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244B3297AEAE6595EF1A5DB6499D6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207421
IP: 94.231.214.0/24
IP: 2a10:b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4b:32:97:ae:ae:65:95:ef:1a:5d:b6:49:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:da:93:10:82:b1:78:51:c0:ea:7a:d9:05:
16:1f:d6:e3:d3:3c:2a:e6:42:77:35:c1:89:3c:4a:
0b:e4:d1:c2:3a:7c:77:99:6b:de:4e:63:0f:78:2c:
71:2f:ee:1d:c0:a5:20:35:b5:f0:44:02:55:fa:0f:
34:43:3e:d6:34:cc:29:10:12:66:ae:48:b9:ce:84:
8b:0c:fa:1f:1d:16:4e:9a:fe:5f:07:ea:64:e4:18:
f5:91:97:2f:81:c7:8b:ee:f0:24:db:ab:e7:e0:62:
b4:6f:3a:08:f5:3b:db:45:66:8f:e8:2d:fd:f4:17:
a0:1a:da:f6:72:26:5b:62:e5:05:93:e1:4e:25:d9:
be:96:6f:c4:36:47:51:4d:14:b7:0d:c3:04:8c:08:
4d:93:a0:9c:1f:6e:1f:54:c0:5a:dd:4d:48:7a:2f:
a0:0b:e3:1d:e1:4c:6b:e2:b9:ae:9b:b7:10:5d:37:
12:f4:b9:43:b2:ee:99:b9:4e:1a:eb:aa:bb:63:3c:
f3:c3:6f:2e:ee:32:20:8d:67:0b:a0:73:61:40:75:
51:e7:7b:ed:b3:62:e2:44:dd:ff:ee:8f:61:13:38:
a4:51:a0:f5:b3:80:31:7a:fa:19:d0:9f:44:ec:d7:
24:a6:1d:47:2b:b6:75:5a:4e:2f:4a:6f:de:b0:b7:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.214.0/24
IPv6:
2a10:b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207421
Signature Algorithm: sha256WithRSAEncryption
69:f4:a4:25:ad:de:4a:c9:c2:67:78:bf:83:f9:77:5f:93:02:
21:48:8d:a9:8a:42:a3:97:54:41:35:e5:24:6e:c2:30:22:fe:
d1:af:fc:82:bd:ba:ff:1c:c1:f6:82:43:4c:62:30:f9:03:4c:
95:3d:11:28:cf:a8:69:45:fe:c1:2e:ad:2c:82:c2:58:0e:23:
e0:10:ba:0f:0c:e6:96:d1:9d:23:94:8a:f4:75:bb:c7:5a:d9:
99:b2:1b:10:3d:b6:b0:fb:d9:d5:4c:0f:cc:41:b0:72:01:cd:
3b:6a:4b:34:30:d6:a5:25:d3:65:37:d2:b6:33:6c:d3:35:f3:
56:7e:36:a0:cc:20:49:45:24:5f:4b:06:89:e2:19:a0:ab:c0:
c9:75:b7:3e:a6:91:7f:a1:24:27:fc:c0:3f:cc:8b:12:1c:6d:
e7:85:13:4b:6b:94:34:04:ed:de:0e:1d:b7:14:eb:c5:7c:aa:
87:bb:5f:42:c2:3d:3e:22:d0:de:79:55:53:ab:e2:b0:32:12:
03:03:65:15:74:27:a9:df:87:44:3b:59:cc:3e:08:dc:ff:c7:
ce:73:d0:62:97:e0:e4:96:37:a1:3e:f5:7f:3e:3e:7a:08:5a:
54:f8:60:74:bf:ed:b8:f3:8a:61:11:e0:d8:0d:5e:e9:d3:11:
41:ae:97:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:25:28 2024 by rpki-client on console-ams.rpki-client.org