Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
File: eA-G0ESkoqIzMZQYqo2prYN8duo.cer (raw, json)
Hash identifier: kY/qUuieuroumRQhSRaoJ9uAWzItDCzNy77xraLkeZs=
Subject key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9993A7F707AB822759AF22FE48291C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209591
IP: 141.98.124.0/22
IP: 2a10:2980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:93:a7:f7:07:ab:82:27:59:af:22:fe:48:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:ee:57:cd:5b:f7:8b:df:8c:a8:e0:dc:cf:
dc:62:4b:8a:46:1e:88:5b:a2:f5:1c:61:5e:bb:ba:
d6:fe:c5:2a:21:98:a2:b4:f7:1b:bf:24:b7:9c:fd:
c7:3b:dc:7f:da:95:6a:8f:bc:60:d8:7e:ed:21:60:
65:2c:ed:67:65:b4:d8:36:8d:1b:be:a7:05:94:ac:
24:51:2d:d5:8f:7e:ce:cb:26:e7:d6:dc:2b:44:cf:
31:5c:1a:70:cf:8d:d7:86:30:f8:ed:f2:b1:60:02:
37:c4:a2:dd:2e:a5:71:05:fb:a8:a6:53:1a:f7:ca:
79:df:f1:1b:58:40:85:18:b1:1b:85:15:04:ae:29:
74:a1:97:60:0a:57:80:b8:b0:5d:f4:76:07:8b:ec:
58:f5:c7:26:e5:62:5d:2d:3f:0b:7e:a6:49:f1:70:
97:fd:9d:ae:c0:7c:b0:f0:20:32:06:67:33:31:eb:
ae:c6:de:47:2a:62:a9:4b:7a:1f:0f:d3:f8:a1:cf:
ba:fd:83:94:49:f4:40:bb:c3:b1:3e:fd:c1:1b:85:
55:42:58:f5:1a:b6:65:7a:97:62:28:13:89:06:06:
fa:8d:ed:f5:f4:07:72:e7:ae:f5:e9:95:f5:1c:81:
ff:7f:1b:8f:47:33:5e:15:53:3e:f0:9c:c8:67:54:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.124.0/22
IPv6:
2a10:2980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209591
Signature Algorithm: sha256WithRSAEncryption
64:4f:ca:0b:e4:ae:4c:35:e7:6b:cf:f8:82:77:05:e2:d8:51:
93:a2:78:f3:d5:bc:17:49:73:4d:cf:81:45:fe:11:68:ed:24:
20:84:ca:02:80:e9:cd:d7:b4:2e:d4:43:b1:50:ca:48:c8:59:
ca:2f:d5:6a:84:8a:ea:8b:a9:17:de:ec:5c:4d:19:70:e2:50:
c5:43:51:b2:8d:3f:73:66:54:0f:8e:ae:9c:b6:ab:d6:b4:04:
d0:97:4b:92:13:33:e4:bd:14:69:86:c1:d3:36:28:fe:47:4d:
bc:82:0e:75:81:d7:20:9b:08:c6:e8:6c:65:bc:9f:f0:6c:48:
fc:32:4b:13:01:0a:f6:d0:b7:66:9f:b4:b4:a6:d5:70:f3:19:
6a:2a:f9:f9:64:7e:81:5c:70:d7:31:cf:0c:f1:a9:01:af:47:
9b:ae:c5:87:ce:59:9c:ff:76:06:c3:4d:41:73:f4:bc:a4:9a:
89:83:93:92:1e:a6:da:df:67:34:14:66:31:b2:72:20:f4:12:
60:af:f4:7d:bf:83:b6:a7:51:18:7f:59:d8:13:55:67:44:6e:
b5:76:9c:35:42:2f:b7:f7:c0:0d:b3:26:5f:89:33:5e:9b:8b:
e4:92:23:96:49:e7:3d:ea:d6:8f:44:c9:6a:4f:b8:41:59:f8:
d5:81:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:03:46 2024 by rpki-client on console-fra.rpki-client.org