Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.cer (raw, json)
Hash identifier: /errTwP+0Aov6dwgJNAb2/HEVEDahS/FzlLM13Sz/X4=
Subject key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F8B764A92029B17A1EAE8FF894ACC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35181
IP: 85.239.0.0/19
IP: 2a0c:ca00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8b:76:4a:92:02:9b:17:a1:ea:e8:ff:89:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:1c:b5:77:5d:3d:22:68:54:f4:4e:2a:01:
5a:cb:48:1c:8f:09:98:5f:75:d7:4a:0b:4a:06:d3:
9c:ea:07:91:89:ec:12:57:b7:7b:6a:c5:c8:e1:66:
48:6e:09:ea:24:f0:42:8b:60:0d:51:17:58:9e:05:
77:66:f6:04:64:c1:29:92:2a:18:50:9f:4e:db:09:
b0:32:55:06:71:07:68:7f:10:67:7d:a1:84:2c:da:
fe:a5:aa:3c:e4:a0:c5:b3:d2:6f:f1:89:6a:0c:e6:
23:44:91:96:60:d9:f5:51:81:d6:49:e0:6f:a2:84:
d8:83:12:7f:0b:0c:07:df:0e:96:fa:da:93:f1:98:
ad:f4:c8:44:7d:80:63:12:ad:db:05:89:1c:46:9b:
92:1e:49:25:11:ff:1d:42:81:cb:68:5e:97:1c:64:
bb:12:4b:0d:93:9a:01:d5:72:da:60:f9:b8:8d:fb:
00:9d:7f:f5:82:13:46:51:91:f2:ae:6d:98:03:5f:
49:1c:55:f6:29:ea:d5:02:92:a3:09:64:78:3a:64:
b9:be:75:04:09:ff:9a:6a:da:c7:b7:82:6f:2f:87:
1e:cb:71:24:20:0c:f2:f4:f7:8e:70:60:8e:6c:bf:
29:57:05:7a:d4:a2:e1:63:d5:19:32:28:f3:b1:d9:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.0.0/19
IPv6:
2a0c:ca00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35181
Signature Algorithm: sha256WithRSAEncryption
a9:3f:b6:6a:6d:42:10:02:44:b1:f8:3f:37:b3:36:6c:78:ad:
99:06:55:b6:f1:d5:49:b4:1b:4c:0d:fc:49:c3:bb:03:ae:b1:
69:0d:a4:8c:51:6f:06:48:7a:3e:12:90:5a:a6:81:fa:29:e5:
c6:de:79:f0:83:e0:9c:c5:73:27:53:99:98:d1:6f:76:8e:01:
12:21:8e:48:93:9d:a8:b1:3a:df:c4:03:6c:24:35:cd:6e:07:
f1:8c:b6:5e:6f:93:a7:77:f4:a4:a0:b4:79:65:b7:51:8c:60:
0d:0f:68:9b:57:c6:11:c3:47:3d:bd:67:12:09:a1:7d:92:cb:
b9:4e:6b:45:44:56:c1:c2:7d:8d:85:8c:39:55:2c:d0:26:40:
99:77:40:00:14:33:ea:40:0e:d3:3c:d7:e6:c7:ae:e4:91:75:
d6:c1:71:df:dd:3a:7e:db:c3:ee:f5:aa:a3:8c:44:6e:2e:e1:
62:44:9f:40:1a:8a:fa:91:dc:56:3d:93:59:a3:b3:74:04:df:
ee:6e:df:38:45:5a:1e:d5:62:00:f2:4f:6a:77:ea:a6:30:47:
42:af:cb:1a:84:80:54:e8:0b:a1:80:95:5b:37:d5:31:3e:be:
eb:c6:cb:af:af:f4:a2:ac:49:df:84:b7:61:07:c9:ea:ec:ac:
34:5c:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:44:27 2024 by rpki-client on console-fra.rpki-client.org