Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
File: eoBXqNht0zDzh4AfED8-u2_byqo.cer (raw, json)
Hash identifier: DlJ40Hd/InoHAhJUrl70/MDKsPGc0asQ4B7LDWktXcg=
Subject key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348ED2CDB1FEE0624E9678D79CDF232
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56984
IP: 193.36.168.0/22
IP: 2a0c:8940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ed:2c:db:1f:ee:06:24:e9:67:8d:79:cd:f2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:7f:cd:8d:34:3f:8b:65:1e:4c:34:6b:c1:
a0:0a:25:bf:1e:3d:a2:1e:99:a0:77:55:f8:c2:24:
27:a8:03:80:a3:8a:b7:28:e5:02:97:64:9f:61:46:
c3:e1:eb:35:56:1b:b8:8f:94:b7:c1:de:a3:8c:52:
ff:2b:d5:43:b1:72:98:52:18:e9:81:f2:ce:75:9a:
a2:c1:39:d8:bb:12:80:ff:60:d5:29:a9:0e:89:43:
44:bb:3f:a4:cf:9a:d6:1c:95:ab:04:05:17:97:bd:
6c:0b:f2:9a:cb:cd:10:31:2e:52:58:c6:64:1a:12:
8a:47:32:fe:6a:d2:8c:f3:68:fb:e8:15:77:7f:91:
51:78:c5:62:86:40:26:6b:4b:36:de:fc:81:0e:20:
39:83:5a:2c:f1:b9:0e:93:e8:68:23:51:b1:1e:0e:
b0:e3:f9:21:59:fb:cb:69:a0:db:0f:36:d3:73:06:
67:69:ff:65:c3:74:be:3e:80:bc:eb:9f:17:f5:b2:
0c:31:56:73:85:17:5a:8a:90:82:88:40:a4:ab:d0:
99:9c:9c:bb:f5:70:00:2f:76:49:d7:3c:f9:ef:78:
df:6a:9c:4c:0b:a6:c8:d8:29:5a:20:34:3b:05:aa:
ca:22:3b:cb:31:e5:92:9a:58:d4:f6:1d:57:8f:25:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.168.0/22
IPv6:
2a0c:8940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56984
Signature Algorithm: sha256WithRSAEncryption
41:a5:3c:22:04:b8:2c:69:ba:2f:30:a5:0b:25:1e:db:f8:f5:
fd:af:55:d4:f5:08:5c:c4:a3:5c:60:70:47:f6:18:fc:ba:2d:
76:ed:6e:78:e2:53:c2:74:96:f0:43:24:57:86:b9:7a:43:17:
9e:25:b3:1e:c2:1c:6c:a1:25:50:82:91:98:4b:d7:01:d2:c6:
7f:43:a7:a7:f3:fc:95:3f:d2:42:5d:a3:71:40:b3:89:e8:23:
03:2b:a3:f7:34:f9:48:72:95:da:cf:a6:36:78:bb:2a:7c:90:
66:fa:e5:5b:cc:b7:17:45:f2:ae:0e:56:63:60:5f:ce:95:e0:
18:fe:20:57:aa:8a:7a:61:9b:d6:c9:39:b3:d5:5e:87:af:61:
45:1a:06:6f:6c:cc:c4:0a:dd:11:f0:95:da:b6:7e:f5:6e:7a:
38:ed:10:2f:99:ab:55:20:9c:da:09:69:a6:5e:5f:bb:c7:4f:
64:ac:ff:cb:e3:b9:65:d7:14:8f:82:3d:e8:e3:72:00:4b:9b:
5a:81:17:3f:74:9a:ce:6d:c8:24:8e:25:bc:4f:0a:64:90:8a:
9f:83:c9:55:1f:de:dd:4c:8a:de:20:56:4d:7c:ce:32:39:8e:
50:87:ca:8f:74:90:d2:48:e5:da:78:7a:d1:03:83:22:dc:5f:
72:43:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:30:07 2024 by rpki-client on console-fra.rpki-client.org