Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
File: e_7CSauE-BJlaciz2OP0PNgsYRU.cer (raw, json)
Hash identifier: eozQ7I54wJCYtC6RpEKgz1q4mJvCDao6SIiIp3+U5oA=
Subject key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B38F6DE31369B59EAE5DC8C056A496
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59897
IP: 185.62.212.0/22
IP: 2a03:4e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:6d:e3:13:69:b5:9e:ae:5d:c8:c0:56:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:66:f0:1a:33:fb:0a:b0:9d:67:10:53:fe:
1c:94:15:de:39:9e:7d:20:70:dd:0b:21:f4:36:12:
25:7e:1b:5a:7a:98:96:79:41:28:10:7f:c2:06:2d:
38:c0:6c:0b:42:95:98:e4:f3:6a:8b:67:08:40:64:
dd:4b:7d:49:14:39:bb:ee:30:5f:45:b2:de:60:de:
72:26:d7:cc:89:3d:be:bf:c0:b8:55:df:83:ad:e1:
24:61:dd:43:68:f6:b1:f3:af:e4:32:2b:de:1e:95:
fa:0f:50:24:df:3a:b3:f0:3f:b1:2b:2e:17:91:3c:
fc:a5:83:88:49:b2:12:af:ec:5a:90:a0:0b:5c:34:
3f:a3:7a:32:e1:29:70:4f:f1:80:8f:4f:a7:bd:96:
c5:50:a8:39:c1:f8:32:46:80:dc:3c:5e:75:16:90:
31:ea:85:a6:50:3f:ea:e0:50:e2:79:42:e6:0b:eb:
3b:05:28:2e:57:78:e2:e0:97:ed:6a:64:10:09:d9:
1b:03:d1:2e:1e:cd:23:35:1e:e4:af:7e:a4:8b:f4:
42:97:c3:a6:1f:bc:f5:7c:80:9e:16:19:77:30:cc:
70:ee:a5:94:10:2c:14:1a:7c:94:1d:ba:15:63:da:
3f:9a:56:87:ca:1f:f0:dd:92:1d:12:ec:bb:84:18:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.212.0/22
IPv6:
2a03:4e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59897
Signature Algorithm: sha256WithRSAEncryption
99:cf:b5:48:f1:06:19:bd:a4:a9:e2:40:c9:5a:31:1c:56:48:
97:46:bb:f5:55:d9:37:bb:0c:11:93:f1:c2:f4:f9:a8:82:d9:
04:cd:3f:1a:18:5a:05:38:c7:fe:9e:94:82:f7:7f:83:06:be:
b0:ac:ce:4b:82:5b:8d:27:a2:d0:5f:48:4d:38:c2:0e:12:9e:
2f:41:7a:0b:f4:5d:b9:a8:4e:e3:d3:be:ed:3c:6e:41:87:c5:
45:80:01:a8:e5:ca:5c:b3:66:ba:2a:b9:90:19:01:18:db:e6:
d8:e5:64:19:32:3f:40:d2:6b:b7:10:ba:3a:13:fd:48:59:19:
d9:2c:87:cc:cc:f1:7f:c6:1f:dc:6a:25:05:f1:1a:0b:f4:ee:
c2:e9:c3:81:77:9d:d5:a1:d4:be:1c:72:97:af:1f:d9:c1:b7:
19:a9:9e:3c:bd:c7:9f:c7:97:ac:27:94:51:bf:1e:86:28:24:
44:10:7c:99:7c:dd:be:c6:93:fa:b9:e8:42:60:fe:e1:ac:1b:
fc:9b:c2:28:1f:ef:1e:31:e4:d3:ab:2a:35:38:28:e2:87:51:
d3:42:d9:38:fb:b7:92:17:1c:ea:99:df:28:e3:4b:70:1a:01:
cd:8f:bf:be:5c:f7:05:87:e9:df:02:1c:46:47:23:26:10:78:
98:e0:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:24 2025 by rpki-client