Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
File: egoGVk08cX0tbaoegzxJWXawuto.cer (raw, json)
Hash identifier: /dzHgtdotYlsBHWAUOe9ryNb84aTk+nC+qiZ2OACkaE=
Subject key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E4D4CFE462352B16F1CF278DDCF2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 149.249.0.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4d:4c:fe:46:23:52:b1:6f:1c:f2:78:dd:cf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:6c:2a:70:8a:6e:44:2c:dc:0b:b6:a4:43:
d6:82:68:47:c6:81:67:2a:bb:f2:af:77:ac:8e:44:
0d:dd:3d:98:2e:76:3c:c8:8c:a7:c3:16:21:9f:02:
b1:9d:38:65:7a:19:4a:11:65:28:f3:bb:86:f2:00:
04:5e:f2:00:e8:2b:39:d8:6c:1b:2d:e8:e9:29:e5:
66:43:07:e0:81:80:72:cd:0a:30:da:fa:ad:4c:14:
e6:bf:38:a6:60:bd:14:46:55:35:eb:ef:a4:da:9e:
13:b1:02:15:db:2a:f6:3e:a1:7e:04:93:41:f1:99:
14:ab:07:f1:1a:ec:c1:4d:b7:13:6a:ce:0e:5a:0b:
9f:76:6e:54:26:9e:b2:b1:ca:52:4e:4f:b6:19:c4:
45:fe:12:f9:c9:0e:ca:b3:23:80:3d:5a:12:0c:e8:
f0:af:4b:29:35:46:62:52:80:6f:de:f2:8b:f7:bf:
c0:30:8f:8d:7c:35:5e:b7:76:1e:42:57:34:b6:f5:
e2:15:27:f8:08:c5:14:f8:e5:cd:cb:43:84:dc:0e:
99:b4:16:bb:3d:40:0a:be:87:8c:2b:02:18:f1:43:
13:a9:0c:56:31:ff:50:9e:da:f9:d5:2a:b5:6c:c1:
cc:4c:52:5e:31:79:e8:48:7a:0c:de:fa:0b:f7:bb:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.0.0/21
Signature Algorithm: sha256WithRSAEncryption
04:75:86:33:59:10:7f:97:c0:c1:6a:77:80:2b:58:66:c8:80:
47:82:72:89:17:86:d7:5d:89:08:c7:7b:7f:6f:3b:bf:8b:db:
30:78:37:9c:70:65:df:7b:1f:08:f3:ad:d4:38:6d:6b:bf:8d:
24:cf:45:01:17:a6:dc:de:28:f3:c5:07:c1:1c:cf:1c:98:2c:
8b:d1:b8:2b:65:77:01:7d:a8:1f:41:9b:7f:3b:29:34:68:4e:
af:a6:dc:35:f1:11:d6:4c:15:c7:e8:03:f7:e7:2c:2a:a1:f7:
93:94:b4:c3:34:33:1f:3a:3a:1d:ee:ab:7e:72:59:2b:fd:33:
2c:c4:bf:a6:6d:ba:e3:b6:06:49:06:a1:de:0b:58:11:21:c1:
e0:9a:02:62:1e:7a:17:d8:fd:1c:9c:1e:ab:53:f7:33:a6:d3:
ca:b0:2b:74:42:95:9b:a2:d9:25:38:32:07:18:ce:bb:5e:b7:
f3:61:7e:d6:ff:f0:66:a4:f5:2c:92:bf:22:84:36:82:f0:cb:
c2:75:3a:1f:37:72:ad:52:9d:c3:02:61:44:05:42:7a:f0:61:
b0:a2:d5:af:98:f5:20:90:de:bd:52:f1:7f:11:af:89:10:3c:
fb:a5:f4:0a:aa:fe:ed:ba:ed:e8:fc:ab:63:17:e0:53:0e:13:
89:27:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:05:32 2024 by rpki-client on console-fra.rpki-client.org