Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
File: eDdfthaLNUhBuR0wX50M3AyxUB0.cer (raw, json)
Hash identifier: dEbhkOBiMNbIGTXbnVeoZ2nhVjMYMxlq4TQ6XdQcEGE=
Subject key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42466F2E32765DF44F65A9B7C21778F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62086
IP: 185.48.104.0/22
IP: 2a01:9820::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:f2:e3:27:65:df:44:f6:5a:9b:7c:21:77:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:f0:39:0a:7e:e0:13:38:0e:41:7c:04:2f:
df:dc:0f:56:2d:13:6a:97:3d:3f:45:18:a4:ba:13:
85:20:ff:04:a2:88:8a:02:d7:79:1e:f0:00:ef:c5:
62:04:1f:ea:37:f0:e7:03:c1:d2:29:9b:a7:30:ca:
7f:5c:db:2e:b7:9f:19:94:dd:1b:4e:27:d7:00:66:
c7:10:23:f4:1a:42:84:ca:db:98:fd:67:5b:b4:e2:
ff:24:db:06:9f:55:27:59:e9:25:06:b7:1c:70:0e:
f8:08:a9:58:7e:61:45:78:31:ff:4c:7e:95:af:56:
8c:57:b1:80:e5:c9:ae:3d:bb:5b:56:23:49:65:1c:
45:a2:63:54:d0:6b:dd:64:87:34:70:08:69:27:57:
60:a9:59:48:96:b6:5e:a7:44:4b:18:2a:ae:c9:5f:
0d:ad:f2:07:8b:ed:aa:c8:d0:7d:ca:30:62:56:b1:
25:a1:11:0a:39:02:f6:f2:84:24:45:f2:82:7a:5b:
5f:16:d4:e7:47:08:9f:14:7f:dd:52:5d:2f:75:80:
6e:ee:48:5a:b0:51:52:0b:3b:5b:37:62:8c:25:7c:
37:a7:7f:58:32:ba:53:7d:3f:d5:f2:9e:5a:54:69:
6e:e7:5d:c6:ce:d5:67:ce:92:ae:43:40:61:b5:a9:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.104.0/22
IPv6:
2a01:9820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62086
Signature Algorithm: sha256WithRSAEncryption
a9:6a:e2:8b:44:20:25:ab:f6:3b:b6:22:f1:8f:b5:a9:18:b2:
92:2b:a6:6d:10:9a:be:39:78:30:85:be:8e:1c:97:7b:82:b5:
c2:ab:e3:44:f0:53:d9:95:d0:a5:2f:b7:25:49:5b:37:d2:8d:
dc:97:d4:dd:10:45:9a:35:4f:5d:4b:a2:50:08:16:4a:7e:fa:
d0:2d:b7:53:f3:58:90:4e:1c:88:c6:c3:5b:5e:e2:9d:0a:04:
29:50:7d:82:95:b8:64:97:36:8e:3a:d5:65:14:f8:9d:d0:36:
a5:b1:b6:52:e6:bd:82:a7:ae:8a:04:4d:48:ca:69:15:3f:3e:
74:6e:3a:12:26:0f:87:b3:e6:29:c7:dd:91:24:c3:ee:d7:13:
16:12:16:68:e6:b7:9c:f9:53:e4:df:42:d4:c2:0f:55:da:7b:
23:52:8b:b4:2e:93:a5:37:ef:53:c8:38:8e:64:1d:4d:a6:5a:
8b:28:d8:f4:fb:3f:60:9e:f6:66:5e:f0:74:1a:cd:3a:ce:fc:
e4:0d:91:4a:08:43:a6:cc:f7:6e:70:2a:03:3c:f5:2a:c2:b3:
ea:7c:d7:3d:fd:eb:e4:ac:2b:f2:5d:e9:a5:c0:fd:65:47:8d:
35:5d:91:c3:7d:47:91:6c:4d:be:a7:8f:f6:d8:fd:9c:a5:89:
df:88:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:19:16 2024 by rpki-client on console-ams.rpki-client.org