Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.cer (raw, json)
Hash identifier: BpT9hU0MRpV9qy8mg5PtblaRqUqvXBbnuUgdDHHWnn0=
Subject key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8012AF92941A59339DC75B91A1B4D03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212209
IP: 194.88.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2a:f9:29:41:a5:93:39:dc:75:b9:1a:1b:4d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:99:8c:be:35:cf:47:e5:45:da:c7:c8:fd:
27:eb:5b:5a:68:7f:79:a9:1d:9f:1c:36:9a:9d:99:
dc:60:d6:73:7f:91:45:96:d4:50:06:9a:7f:6a:cf:
6b:8c:51:6b:bd:63:8b:57:f2:23:78:01:3a:4c:5f:
bf:2b:7d:de:8a:f7:91:6a:86:d7:5e:e1:98:88:9a:
5c:ab:37:f6:df:ee:d9:19:46:04:06:f8:34:dc:e7:
1f:f4:db:04:29:c5:15:a6:7c:9d:4f:9f:21:7a:6f:
d0:1a:58:8b:78:7c:5f:b9:09:c1:09:4e:33:59:c9:
47:59:1d:2f:4a:76:96:bb:c8:bd:71:fc:9a:6e:32:
58:87:1b:73:4b:19:5c:de:21:a2:3f:46:ad:c0:15:
d0:ee:51:40:e3:11:b5:e6:df:38:cb:13:45:7e:8e:
88:e0:56:d3:54:9b:25:19:e4:7e:b0:a5:51:36:2a:
b7:2c:47:24:e3:e8:37:de:16:74:b7:db:f6:2e:d9:
67:c6:cf:f7:e0:77:3f:45:44:b2:b9:80:17:74:81:
26:71:72:da:6e:c8:96:83:11:35:ec:fd:3f:20:ab:
f3:4a:81:83:ef:c4:e8:75:79:6f:3d:80:c7:31:d8:
55:76:29:e4:f9:09:92:be:66:2c:ab:80:26:60:eb:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212209
Signature Algorithm: sha256WithRSAEncryption
99:6c:a3:ed:1b:5c:9c:6d:db:a8:82:c9:f2:64:24:22:60:25:
68:52:c9:45:13:61:a3:fb:e3:68:4d:90:9d:ff:e2:9c:89:cd:
bf:92:69:eb:90:81:70:38:de:95:8d:ae:c6:79:d0:4d:06:f7:
7d:68:f7:66:19:9c:63:65:b9:1e:38:6d:f0:70:4b:0f:ab:ca:
38:62:8c:9f:7b:45:0b:38:93:83:af:3e:61:04:bc:50:fc:dc:
3b:80:47:84:a6:c8:8e:f6:d0:08:b7:ed:40:85:66:7a:a5:b8:
5a:51:ef:ed:f7:ae:eb:81:53:e8:6e:db:04:a9:c4:04:8d:ee:
32:73:88:7b:2d:54:cb:30:9e:5e:12:fc:30:fd:31:5d:5d:0b:
fb:e1:e4:c6:74:ce:55:ac:50:ee:96:4a:85:e9:a2:3e:dd:cb:
95:11:74:83:e9:a0:68:6a:c7:90:70:d8:87:7b:53:84:54:b2:
a5:35:4f:d4:fc:38:14:3b:e1:86:d7:18:ec:44:61:29:f6:00:
fb:6d:da:05:7a:c1:fa:d2:e5:a6:75:4f:bc:2d:b7:0c:23:a2:
ea:3d:da:1c:ac:fe:ed:bf:90:a6:bd:ac:47:2c:34:ef:97:50:
b0:50:a4:a3:ab:ee:8c:46:2a:38:25:0b:35:ec:37:e6:42:d2:
df:6e:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:29:18 2024 by rpki-client on console-ams.rpki-client.org