Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
File: eIehaWWHX29TvMMfDkk6lhVOt7k.cer (raw, json)
Hash identifier: 7zsO5UHuDTljAzI2mK72rySEr4ONhf4bQ7Mr+aKvaHA=
Subject key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D17751C50ACB80FF879DF0EF5F031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204720
IP: 185.141.224.0/22
IP: 2a0c:4480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:75:1c:50:ac:b8:0f:f8:79:df:0e:f5:f0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:d1:43:d0:8b:ca:d6:63:4c:4a:98:c8:6b:
f5:6c:02:14:c5:45:e6:ad:fb:bf:be:fe:8e:71:b3:
fd:83:24:49:90:c9:31:9a:c2:f7:d6:1f:a7:74:af:
ac:0b:b8:1c:85:05:bd:97:e8:cf:1e:1d:db:20:d7:
b0:5c:83:c6:55:27:99:48:89:64:91:cf:ef:a7:5f:
0b:1a:3f:cf:9c:57:ef:3f:36:50:bd:db:8b:33:e0:
ef:c9:80:71:50:82:3f:1a:b5:5d:65:b8:bb:9b:5f:
50:fe:88:e6:37:09:20:df:bb:67:a4:0d:a5:69:f9:
85:ab:8c:36:38:e9:09:cf:87:43:f6:3a:e4:14:e5:
5b:00:2a:96:8d:b0:8f:ef:c2:b9:e1:a5:4a:85:be:
38:de:0a:77:97:69:b0:31:95:79:39:f3:e7:3c:bb:
30:6a:4d:a6:22:aa:bd:eb:f1:c0:d6:79:d4:40:9c:
1b:9a:33:5d:a7:24:75:0a:a0:a4:a5:c9:0b:08:42:
47:14:aa:bb:64:50:1f:87:3c:77:4f:f1:20:a1:83:
98:e5:5a:27:07:14:2b:3d:40:7a:d4:40:0e:5d:5e:
7d:7c:30:3e:19:41:fe:95:34:bc:17:14:bf:af:97:
bd:62:54:d7:50:66:2c:52:89:3f:b7:5e:f0:9e:d0:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.224.0/22
IPv6:
2a0c:4480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204720
Signature Algorithm: sha256WithRSAEncryption
54:fc:de:1b:46:4c:99:14:65:a9:fc:bc:a0:7a:80:34:55:3c:
e3:02:86:92:2d:47:ed:c4:2d:30:c5:56:fa:88:f2:ba:e8:71:
16:ac:74:1c:6f:5c:a8:e7:6f:b7:0b:20:41:7c:96:30:e3:14:
6f:9a:be:19:0d:30:ad:74:6d:05:ed:89:67:d3:fa:3a:e8:ae:
e5:9b:ec:57:b7:1f:4a:9e:4e:47:9c:64:d5:95:e4:61:97:d0:
7a:08:e9:11:a1:15:ec:c9:4f:7b:9e:92:58:00:b9:d1:3f:7b:
d0:a9:ef:e3:76:c1:a7:d3:72:d5:7c:ef:a8:ee:b9:46:ca:88:
db:4a:ff:27:0e:7e:5c:c3:82:86:57:9b:78:f3:5f:a3:61:28:
f5:92:b3:3f:52:56:6f:9d:b0:53:70:ac:20:d2:8d:97:dc:b3:
dc:e3:a0:30:7c:90:60:2a:67:74:41:fa:60:f4:d5:60:ee:60:
8c:2e:d7:c2:0a:79:4f:ad:db:f9:c1:10:a1:aa:04:39:0c:b0:
3d:fa:bf:db:fb:77:b2:cf:ea:eb:2e:8d:0e:d4:0f:30:26:b3:
e4:58:83:03:68:ce:da:41:11:86:fb:7b:ee:8e:1f:4f:26:8e:
bc:57:9e:a6:7b:45:63:df:39:3d:2d:75:f9:9b:92:f8:8e:1d:
8f:74:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:28:20 2024 by rpki-client on console-fra.rpki-client.org