Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
File: eilzR6QNO99Xh8x1OsJALQgkv8s.cer (raw, json)
Hash identifier: NpmZHhTaDGcBN+1kkm7S5L9oFSKKyengEUfHc86fPXw=
Subject key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2AD3A9A40BAA79290D0826755488
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50770
IP: 185.177.211.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:d3:a9:a4:0b:aa:79:29:0d:08:26:75:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:69:38:75:6e:e2:77:9f:0c:e2:f0:a5:0c:
a4:34:91:0e:e6:c3:fc:0e:74:c9:33:0e:0a:5e:cb:
fd:86:09:93:1e:2e:d7:fe:a2:72:da:85:30:e8:9c:
90:08:d6:4e:f0:49:a0:65:a0:34:b6:cf:12:89:f7:
c7:d9:2d:95:37:52:3d:25:80:c4:75:2f:3e:a2:3c:
ee:4e:4b:6d:73:6e:69:40:32:d3:a8:be:05:25:d2:
a9:19:84:03:21:04:ed:cf:0f:7e:7f:09:76:4a:f4:
70:2d:c9:4a:a6:b9:a1:fb:7b:7e:b9:28:a6:b8:66:
9a:d6:7b:9c:b9:3e:30:02:1d:16:c0:c0:23:91:90:
4b:d6:ea:6e:18:ad:a7:c0:59:e2:03:1e:1e:39:2c:
25:c8:dc:fb:a8:e4:46:1b:81:06:ce:72:49:61:e9:
e2:5d:3e:8d:99:ea:fb:8c:bc:f2:d1:59:5e:5f:56:
8f:31:40:bb:b5:1f:17:5c:ab:09:83:30:3c:dc:69:
d3:8e:6b:e7:31:63:7c:43:36:6e:70:85:5f:42:f1:
23:17:0d:12:03:3c:33:cf:bb:c9:16:fe:47:5b:8f:
88:80:79:4c:5b:2b:f4:65:88:2f:55:38:5d:a9:9f:
96:e0:b8:f5:03:6f:3a:1a:26:05:ab:7e:9b:a1:b5:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.211.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50770
Signature Algorithm: sha256WithRSAEncryption
79:c7:c3:8f:45:6b:68:a2:bf:f7:a1:85:5d:22:26:12:b3:da:
11:d9:a8:87:10:cb:4e:3f:84:62:be:65:cd:e8:ef:d5:90:d3:
e4:10:74:8a:6b:63:2d:c8:ef:6a:f8:22:04:88:91:26:9b:08:
0a:04:5e:eb:f0:cb:08:3b:2d:58:67:aa:1b:14:0c:9c:fe:06:
db:d2:2f:fa:bd:0d:89:e6:11:1e:10:b6:2a:b6:8d:4e:22:19:
09:84:2d:1f:b3:9c:e8:09:a5:88:f7:75:de:7f:e3:6c:d1:6e:
32:2e:f7:84:b7:ce:da:f7:af:21:1e:87:9f:dd:23:a0:03:5b:
9e:d5:e0:77:8b:fa:9a:cc:f5:b4:ff:21:27:8a:0f:d4:5a:09:
11:d5:fc:44:46:38:89:f6:9c:67:f9:79:ce:de:6e:f9:6e:f3:
b3:bc:d8:82:9c:2a:1c:1c:ab:4d:82:49:77:12:61:f1:e9:30:
d4:d3:77:43:1d:73:4c:c2:40:f5:4f:37:58:6f:bd:fd:be:a2:
7e:4f:6f:92:0a:fc:b0:a7:54:66:ce:da:69:49:ac:28:b3:87:
a5:41:a2:c4:7a:31:df:aa:0f:1f:2c:29:2e:58:9c:f0:8f:87:
2b:42:cf:e0:c2:cb:68:69:35:88:13:73:f3:83:3e:30:1b:64:
83:a7:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:57 2025 by rpki-client