Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.cer (raw, json)
Hash identifier: Gs0ZIMdxdHgcS9Bp9ilrGVaqz0ld1zphPzoJiNRbeCo=
Subject key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190A1196926E879CB2BE46EB87A8A332953
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jul 2024 09:21:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199969
IP: 195.88.122.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:19:69:26:e8:79:cb:2b:e4:6e:b8:7a:8a:33:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 09:21:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:24:9b:be:96:a5:5c:fb:bb:15:99:d6:89:
c9:d8:9f:ce:1d:77:c5:7b:7f:d2:1e:8a:49:f8:50:
37:e3:ef:98:57:99:3a:87:af:51:93:42:72:d5:10:
a3:1f:db:0d:cb:1a:f0:33:cc:d7:4e:ad:4a:e5:f6:
1f:82:c1:ce:6e:d1:ef:e7:7d:5a:c9:74:c6:98:20:
20:37:b0:42:59:be:16:99:38:7d:1f:53:43:74:d8:
1a:48:94:6a:91:83:1e:06:f1:4d:8c:5d:5d:f1:98:
3e:87:3e:4b:40:79:3b:00:e9:99:3c:6e:83:51:e6:
eb:dc:cf:1a:f9:3f:01:e1:79:39:26:ce:e2:a8:96:
7f:4a:d5:d5:ce:6d:c2:bb:72:6c:59:44:fc:9f:18:
f5:b3:60:6c:39:5d:16:a6:08:fb:c8:33:68:c1:6d:
b5:c1:b1:2e:7d:04:99:51:80:a0:81:e4:cc:9d:1b:
d0:3a:0c:81:fc:85:02:80:7b:da:e3:b1:43:10:9f:
85:f9:39:2f:da:0a:0c:d6:8c:db:da:32:62:bf:07:
95:19:bb:1f:9a:05:57:12:f2:70:5f:26:f6:dd:88:
96:b5:f7:30:63:3c:13:63:f3:90:53:60:89:9c:79:
35:29:25:f1:09:df:58:dc:d2:ac:dd:b2:f6:e5:45:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.122.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199969
Signature Algorithm: sha256WithRSAEncryption
3a:fb:bd:67:7a:1a:34:52:0e:a9:77:12:a8:e6:dc:4a:c7:62:
e9:9e:25:ce:f9:d1:e5:3b:db:1f:9c:04:bb:3d:69:14:c9:c2:
37:97:ad:c7:f0:43:ff:28:0d:00:77:26:bc:81:8c:56:b3:12:
12:9f:51:c6:e4:f3:54:65:06:da:6c:69:9c:c4:22:25:eb:3f:
12:b4:38:b4:c6:42:6b:ad:fb:3b:1c:93:4c:42:83:11:48:71:
68:ee:9b:d8:73:8c:a6:c5:31:2e:fe:50:3b:9b:f2:1a:3b:21:
18:32:18:27:ed:f7:e4:6b:0a:72:95:ed:69:6f:34:68:33:54:
3f:df:fe:aa:8f:fb:64:21:fa:00:be:a1:44:06:91:cb:c5:c7:
a4:7f:5b:a2:e6:ac:78:ae:4d:58:11:ce:47:d8:47:b0:06:55:
48:79:8e:12:ed:f8:54:6b:a5:a0:21:d3:3e:39:11:ea:d4:32:
4e:e9:7b:ca:2e:bb:47:84:0c:45:40:18:b9:d6:81:4e:31:e5:
4f:2c:0f:5e:a0:56:7e:03:9f:66:91:fa:ff:bf:b3:22:71:8b:
07:38:37:35:33:4e:40:23:e1:37:a6:d3:fb:b5:47:e2:7a:83:
95:86:4f:01:d3:c3:af:68:56:e0:e6:78:1f:66:68:72:90:28:
0e:b3:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:19:21 2024 by rpki-client on console-ams.rpki-client.org