Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
File: ejvLQKHIyPn3WNzeHCkHk42GhS8.cer (raw, json)
Hash identifier: bZ6O/aZiNCbsK9HYIj7CHSChjASIClhKduC3Oq3rIaE=
Subject key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7266AEF5086AACB3EF9249CF9809DA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31467
IP: 83.137.104.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:6a:ef:50:86:aa:cb:3e:f9:24:9c:f9:80:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:7d:98:ca:a8:d4:57:c8:cd:63:23:4e:be:
6f:5d:e5:9c:d0:d3:b9:25:6e:af:f9:e8:b1:55:b8:
fd:90:b2:96:30:4e:7c:7f:ac:0a:b3:7a:c7:f7:21:
a5:d1:02:0f:10:cd:85:47:b1:cc:8a:a9:a8:63:ed:
da:fa:ee:66:45:16:0a:e7:37:7a:48:c5:f3:5e:e3:
42:b8:69:1b:80:56:d9:c4:e9:97:65:1d:15:2f:86:
21:29:89:03:4e:32:98:e1:90:86:77:b5:e6:30:d7:
74:c8:40:5d:1a:b1:fa:1d:eb:3e:05:84:89:e4:23:
3e:48:dd:d7:5d:d5:c2:21:28:1b:3b:3f:1c:e6:9b:
6b:2c:60:4d:35:60:4f:c9:3a:5c:5a:68:a3:59:51:
a8:75:d3:77:45:e4:10:4a:da:72:a1:e8:a4:cd:dc:
42:81:84:57:b2:7a:49:14:10:2f:16:35:dc:e5:4f:
ff:8f:32:64:a6:63:79:8d:28:93:d7:26:c7:86:09:
82:6b:92:d1:92:2c:76:47:a8:45:cf:40:6d:63:5f:
c4:09:e8:47:e0:2b:c8:d8:32:df:91:1d:4f:a4:1e:
b9:5a:b6:21:16:71:a7:05:be:fd:7b:f3:df:0f:31:
a9:40:4c:ea:9c:84:4d:cb:27:5b:d3:14:6c:69:be:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.104.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31467
Signature Algorithm: sha256WithRSAEncryption
65:82:62:69:31:73:a2:cf:6a:19:8e:3f:85:69:74:a2:d1:fb:
5e:50:e3:03:38:1a:42:b2:6a:48:83:1d:9b:e5:dd:69:be:03:
33:9c:a3:fe:a4:a0:b4:e8:ff:ca:27:25:af:96:58:2c:89:1b:
c2:84:b3:65:d9:6c:3d:43:36:f9:19:e0:4e:ce:a2:37:88:8b:
e7:7c:27:f9:8e:00:82:a7:74:d5:f6:05:11:ed:bc:0f:12:b5:
13:3f:03:20:00:a3:be:f2:50:cd:96:79:3d:09:3f:88:22:83:
9f:ae:a2:40:81:2f:3f:05:1f:41:38:da:63:61:e4:bc:98:62:
bb:90:ce:fd:b5:eb:32:91:9d:58:b0:82:43:de:d3:de:9e:04:
47:c5:4b:29:ba:9c:8a:49:60:19:ed:07:bc:d8:ce:9f:4e:52:
2e:7f:b6:a9:91:15:7f:1f:bc:50:67:9d:a1:0c:d9:4e:77:88:
65:d5:0a:3b:92:fa:53:08:91:1d:72:66:f7:58:4a:49:b5:37:
86:d4:67:c0:60:df:2e:11:99:59:a5:f3:0e:fa:36:0a:c0:70:
95:2d:9a:8e:85:c2:22:f3:4f:82:7a:f9:40:cc:f8:cd:89:f7:
14:12:f0:e2:e6:0c:96:65:a3:65:3f:d2:75:5e:40:70:80:1d:
69:a6:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:30:04 2024 by rpki-client on console-fra.rpki-client.org