Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
File: eMceZc96PS4vwrjMPUPUXSs1DfM.cer (raw, json)
Hash identifier: H/bnqXNG1iJAg+lLSHFFUar94S6Cgfu5xpTfZu9Oq3Q=
Subject key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC487AD59B2368224D6FBCE2E8E2DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8592
IP: 45.147.80.0/22
IP: 212.16.0.0/19
IP: 2a02:24f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:7a:d5:9b:23:68:22:4d:6f:bc:e2:e8:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:2e:ad:d9:08:7a:42:d5:aa:91:88:03:3c:
b7:1f:c3:5b:75:25:04:2e:21:8d:27:f8:40:18:79:
09:0b:b8:3b:39:3e:a1:16:8c:60:53:7b:3e:31:ed:
22:f9:ff:c9:7d:57:54:ea:5e:38:5b:10:8b:68:42:
81:ea:e3:08:40:3b:9e:03:63:d2:09:bd:2f:07:d3:
63:a6:0c:6e:c0:b4:9f:2e:4c:3f:22:e0:b9:fe:de:
fa:f7:ab:b0:e4:75:ed:41:bf:c7:7d:03:a2:2d:75:
b6:c9:d1:a6:54:4e:73:5c:52:da:4b:8e:a6:9d:ab:
22:bf:01:33:39:f0:f6:2a:6d:47:ba:72:9a:ca:e4:
64:e2:61:b4:2c:42:75:27:08:55:91:25:07:cc:6d:
fd:ed:cc:2e:08:41:37:7c:82:4b:22:e1:6a:7a:f1:
28:d1:78:2f:06:58:86:31:22:06:79:b2:b5:d3:4e:
25:53:9c:08:72:8e:6a:34:09:7a:5b:fe:a7:b4:22:
d5:43:f7:bb:77:31:ff:ba:73:d7:81:bc:aa:79:7b:
b9:a9:59:ac:1c:9a:de:4e:e4:3a:91:83:fd:f6:e7:
fc:78:0e:94:d8:79:d6:d7:81:ee:5a:4c:6d:e4:91:
e5:36:d3:a5:f6:09:02:73:7d:9c:e1:2f:ee:1b:6f:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.80.0/22
212.16.0.0/19
IPv6:
2a02:24f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8592
Signature Algorithm: sha256WithRSAEncryption
74:d2:4e:5a:b8:d7:d0:c6:de:3e:5f:e2:75:0e:83:9b:bb:02:
d7:d4:2c:b5:6a:3e:80:19:6f:07:76:b1:3b:e4:e8:96:00:86:
1a:f6:fb:d7:aa:0d:eb:dd:68:f1:8f:a0:74:d5:cb:30:47:cb:
1c:95:ea:d4:d9:fc:95:c4:8f:dc:06:89:5a:6e:61:a2:b4:17:
75:25:83:34:95:db:b2:d5:3f:df:d7:b2:8a:f2:6b:63:a9:96:
a6:4c:ff:f1:86:68:38:e1:8b:7f:ee:10:2d:0f:28:52:ee:d0:
49:c6:ef:41:a9:28:82:7f:9e:3b:9d:78:4e:dd:32:1c:7d:e0:
5b:1f:e0:31:83:f5:7f:ac:31:6b:a9:6f:3b:d5:69:3e:6c:b4:
05:44:7a:67:31:d1:a5:38:3f:5a:1a:00:97:4a:f1:44:40:26:
46:c8:65:70:45:d6:81:51:44:ea:94:f3:b0:a4:d8:73:fd:5a:
98:39:26:41:f4:31:c6:f7:e3:f9:4b:f3:7b:bd:fb:be:1c:7a:
73:33:ef:25:f8:c3:53:51:33:53:6c:f3:7e:84:91:13:e6:2d:
3d:11:db:6c:38:24:a5:d8:d6:10:57:bb:79:01:6f:f5:46:3a:
ae:84:5a:32:14:ed:c9:83:89:62:10:a5:47:ab:f7:70:29:1b:
c6:81:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:44:35 2024 by rpki-client on console-fra.rpki-client.org