Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
File: ePKehzghWcpegTh9fud-US-tFjY.cer (raw, json)
Hash identifier: jUa903dhvOChS5M4twZJB5w1Cacc4VqULsgwosllJ40=
Subject key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA299BE6FA8611FFA0CA89C5294C680D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51505
IP: 194.154.32.0/19
IP: 2a14:6700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:9b:e6:fa:86:11:ff:a0:ca:89:c5:29:4c:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f29e87382159ca5e81387d7ee77e512fad1636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:7b:89:30:26:3b:54:0f:d3:88:c7:1b:52:
9d:c1:73:30:f2:23:d1:39:5c:5c:4c:d7:17:40:99:
9b:af:4d:b8:9c:ca:ff:c4:ed:b6:25:51:5c:58:69:
bf:ec:20:bb:6d:66:1a:7f:c8:c7:26:9e:5f:6c:8a:
d2:01:9e:f0:96:66:87:5f:f2:50:77:50:80:58:f3:
7e:14:ab:9c:90:e4:7d:b7:69:eb:9d:50:39:f1:a0:
51:b9:50:be:01:11:69:c8:8b:5a:76:0a:71:3b:99:
ff:a2:f2:8b:9e:d6:d5:08:43:9b:9d:28:57:e7:53:
ad:91:98:65:2f:66:9b:c2:53:50:5b:2c:54:e2:7e:
7a:31:c4:03:57:a4:ff:98:30:dd:2b:e6:af:5c:1c:
dc:40:27:7f:5d:f4:cb:b2:06:19:7c:46:37:b8:b6:
34:db:98:33:86:a8:a4:7d:3e:97:1f:51:63:ba:19:
a9:ac:c7:37:e4:0b:cd:ad:2d:7f:13:1b:ca:57:4e:
34:49:84:4a:fb:86:94:d8:b9:47:58:fc:89:be:5e:
ab:9d:75:4e:c3:6f:86:97:1d:63:c6:a3:bf:90:18:
d9:ca:ce:32:7f:d3:9d:ed:ac:0b:1b:ee:b2:ed:8b:
b9:29:4a:e2:81:df:a6:61:ed:41:b2:70:d2:19:1a:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.154.32.0/19
IPv6:
2a14:6700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51505
Signature Algorithm: sha256WithRSAEncryption
85:cb:3d:c8:0c:20:81:d6:39:12:24:de:41:94:0e:17:c3:20:
9b:1d:8c:b6:64:46:87:40:66:23:2c:18:4d:60:49:d2:ab:9d:
2b:5f:f4:cb:fd:5c:37:95:50:14:df:d9:1c:1c:da:ec:cf:8b:
a0:ef:7d:13:73:5b:1d:36:cd:97:0f:39:03:e6:da:e8:dc:f4:
fc:69:2f:1e:c2:f3:66:80:38:de:5a:e8:46:03:57:5f:ff:22:
ca:86:3f:0f:42:ff:7d:11:8b:b6:c3:de:7c:1a:e7:d6:4c:be:
af:53:db:9e:4e:ad:0d:77:f4:70:f6:cb:0c:d4:49:af:09:5b:
cf:de:db:73:88:c5:a2:3b:f9:69:56:57:d0:cf:33:dc:8c:56:
5e:3b:d3:f5:29:c2:92:3d:75:1d:03:82:31:91:dc:01:ab:6f:
75:83:c0:11:3b:53:d0:2b:2d:02:ac:6a:b4:96:2c:44:08:04:
88:8a:88:0d:c9:27:db:d9:36:df:91:10:14:dc:95:cc:57:3a:
1d:95:4d:b8:09:25:71:89:c5:e0:d2:31:df:8f:7a:d9:67:f5:
06:1a:7f:a5:1d:73:1e:23:c1:4c:8a:cb:a7:10:b5:a1:bd:45:
1f:63:46:6b:ef:9e:cf:5a:0a:ae:0b:40:a6:a6:5f:e7:58:94:
f6:84:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:28:25 2024 by rpki-client on console-fra.rpki-client.org