Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
File: eWnEvYdneAvsFhoq1hKic128q_0.cer (raw, json)
Hash identifier: btN/boZofQmRRa8UH4BoE95DAgrv5ZSOCFxIo99CyWA=
Subject key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCF8BA7B3917AE91C0C0676AC5285A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212926
IP: 88.135.70.0/24
IP: 2a07:e8c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f8:ba:7b:39:17:ae:91:c0:c0:67:6a:c5:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:d8:af:3a:e3:de:50:41:de:c5:0c:fd:90:
35:cb:ba:62:22:ad:bc:b9:33:ec:47:b8:ee:63:69:
b9:63:96:89:f3:0c:d9:3f:ff:a1:e1:26:14:f5:84:
62:e7:5d:41:b0:21:7e:ca:70:15:34:02:20:e2:68:
be:31:75:e5:41:f5:01:67:fd:bc:57:d1:fa:f4:49:
66:d5:81:30:e8:49:a7:2e:a4:1d:4b:3e:42:73:f1:
47:86:71:91:60:4e:fe:a9:52:84:30:ae:8e:e7:be:
fe:c8:48:11:c9:8a:f4:d6:ff:04:59:e8:5f:e7:ed:
ad:0a:e4:85:84:86:f2:e3:35:cf:e6:91:62:4d:fd:
cd:e7:0f:53:f5:f2:9c:c7:7c:69:8c:91:e1:9d:bb:
00:2a:06:39:11:1e:e0:fc:12:db:e5:f9:88:a4:81:
8e:2b:39:96:c8:b3:c8:fa:26:48:c4:d6:d4:ff:8f:
ec:5d:31:b4:f8:2c:e6:c1:80:c3:b1:52:d1:97:ed:
f9:b4:e1:84:3f:34:37:c2:1f:e7:aa:b2:ce:9b:48:
72:b3:dd:7b:d3:7d:c1:f8:72:b6:f2:65:a2:b2:df:
d8:0e:bf:62:8e:d4:fd:a4:ee:29:78:13:5a:1a:dd:
53:83:95:66:ac:5c:19:50:02:7a:86:90:3d:dd:9a:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.70.0/24
IPv6:
2a07:e8c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212926
Signature Algorithm: sha256WithRSAEncryption
35:78:9b:94:5f:03:39:39:7e:d0:97:d3:a2:e7:bd:f8:1e:41:
c6:90:d1:56:79:bc:41:a8:03:65:42:b3:51:54:d7:bc:0e:03:
49:8c:3b:36:f7:df:84:e7:00:9d:cc:ec:33:8b:90:01:10:38:
e1:41:05:c8:25:d6:22:85:02:d7:fa:aa:85:af:93:73:2c:94:
6c:5a:92:81:49:b3:12:2b:b2:e0:1d:f0:6e:90:5d:cd:5d:e3:
75:59:2d:11:0e:6d:b6:53:22:0e:7c:8c:b7:39:0e:f2:b4:99:
65:19:15:84:9e:b7:b0:ba:e3:86:20:2a:d2:c1:6f:19:63:1c:
99:05:e6:4e:70:27:7f:f1:33:31:b7:19:35:52:86:ca:01:d4:
79:01:e2:75:71:c2:2b:30:02:be:9f:2f:d1:34:be:b3:d2:de:
7e:22:d9:76:c2:a0:e6:45:73:8b:61:3b:08:dd:62:e6:56:8a:
94:61:28:d1:1d:6a:f4:c0:52:11:98:38:90:f5:c0:29:0a:cd:
7e:f7:d3:46:b1:79:63:7f:ee:4d:1d:ab:27:9d:3d:ab:cf:4b:
9f:9d:29:67:31:91:82:61:e2:8b:83:17:a8:b6:51:ad:9d:e7:
5e:2b:0f:a1:2b:82:8f:73:52:ea:75:08:f1:ca:bb:1d:b7:ab:
68:cd:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:29 2024 by rpki-client on console-fra.rpki-client.org