Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer (raw, json)
Hash identifier: GrKDqOcYFmOJNuMDS7nlOD1/jTMtZcbT9pN0A3ar4OU=
Subject key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AC074355DD053E5D9C3F7BF9C6106
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28849
IP: 185.15.156.0/22
IP: 217.23.112.0/20
IP: 2a03:c740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c0:74:35:5d:d0:53:e5:d9:c3:f7:bf:9c:61:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79101035d53377c5a72bedca522fc1456e0b8419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:2d:d1:26:ee:ba:8e:b1:44:fe:53:09:b1:
e9:74:d4:8c:75:88:9b:1b:dd:e7:a7:4f:0a:e3:b1:
b0:38:5c:44:4f:7c:d6:b0:21:fa:41:2d:4e:44:d9:
b4:1f:60:36:38:e4:b8:3b:79:60:95:c5:49:21:22:
43:61:ec:8f:00:3e:7f:4d:f6:9d:be:b6:4d:66:fe:
85:a1:3e:c9:aa:9e:30:c1:b1:13:f9:45:21:5f:df:
57:cd:31:78:c8:9a:08:ca:9f:83:85:b7:f0:8b:91:
dd:6e:9f:23:92:1e:f1:65:a4:03:47:9d:26:19:e9:
67:e0:88:5b:b9:e8:31:7a:3c:e7:87:5d:73:6f:d5:
fd:5a:2a:2c:bf:c4:5c:57:af:f1:d9:c2:2a:63:b8:
5c:b7:f5:23:1b:b1:84:bd:37:f1:b9:d3:a2:bc:8e:
9e:4c:e9:6d:c8:b6:9e:4a:8f:aa:4a:42:ef:55:9e:
85:4c:63:90:21:00:c5:83:d5:67:e9:b0:59:fe:5d:
78:e2:ae:9d:c9:f1:4b:f5:df:21:c1:d4:e3:46:b0:
1e:b2:77:36:83:a5:d9:52:c1:98:23:e2:22:15:8a:
8c:fa:6d:d2:8e:8a:d9:ed:bf:01:8d:68:eb:2d:9d:
41:bf:46:a7:10:3e:bf:78:e9:2c:bc:86:6f:5d:ba:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/22
217.23.112.0/20
IPv6:
2a03:c740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28849
Signature Algorithm: sha256WithRSAEncryption
8e:0a:db:54:5f:99:0e:e3:f7:a5:7d:7d:d8:25:0b:e1:9d:5c:
2e:ef:a6:79:f2:35:f1:de:a0:79:10:10:3f:ec:7f:71:4c:3a:
8c:09:56:f3:b5:fe:73:a5:df:98:a1:16:23:6a:23:de:0e:41:
f1:78:37:c5:84:a2:9b:69:f6:5e:99:b1:6a:43:0e:37:94:34:
a2:3d:08:eb:27:b3:ec:b9:a9:4b:84:5f:ca:5d:41:ce:d5:51:
9e:55:14:ce:d9:0b:0e:23:30:f0:67:d8:8d:08:08:59:5d:35:
40:95:d1:f4:86:81:53:2c:03:ad:fe:1f:c6:a9:72:c3:e0:80:
9e:ed:3e:0d:b6:1c:6f:23:3c:af:ce:cc:75:48:df:76:c3:0a:
64:2f:85:25:82:88:1a:c6:00:bf:7c:9d:f5:c4:ac:9d:b2:32:
99:0c:a9:6c:9c:c1:c7:09:f9:33:60:b5:c8:02:a4:bc:d4:ff:
82:52:00:03:21:ec:36:83:8c:f9:7c:de:57:d8:08:cf:5b:68:
7c:99:6e:c0:d1:44:38:04:86:33:97:83:7b:2c:ca:af:c5:a7:
92:0f:69:e0:03:cb:0b:3c:84:fb:b7:dd:86:4a:51:54:1d:a7:
db:70:de:64:03:17:e6:a3:f6:e8:66:f5:3e:ef:0b:3f:84:63:
f1:6d:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:28:26 2024 by rpki-client on console-fra.rpki-client.org