Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
File: eqhsgVbwgG3MzcItzE1hdbj6mJM.cer (raw, json)
Hash identifier: xRyazjgo8VTUGD69WFkM/Pm8FpOrUeetfsaknxTLtXI=
Subject key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F673A27322D047F6F476231B8E9F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.76.116.0/22
IP: 2a0d:7900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:67:3a:27:32:2d:04:7f:6f:47:62:31:b8:e9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:4d:7d:13:4f:97:b6:a8:60:0c:f6:7e:a4:
8e:22:d2:c1:95:f8:08:69:8f:c6:cf:f3:8c:80:95:
23:c7:c7:74:98:de:44:e8:9e:8f:9c:32:1a:60:50:
37:d2:dd:24:cf:f2:81:d4:10:21:ca:a4:e2:f5:7d:
6d:6c:00:93:2f:b1:bd:f6:bb:1f:e9:b0:4e:a2:a7:
e8:4d:f3:79:94:4a:80:1a:a1:b3:54:54:75:30:45:
46:c0:11:2c:e0:14:2c:ab:6b:8a:dc:f0:1e:d4:0a:
45:36:c9:dd:e1:65:43:f8:61:a7:a6:e4:b9:cf:34:
ae:4d:ff:74:0a:87:06:a0:ad:cc:71:c4:f2:01:e8:
7b:e4:eb:91:d9:fe:97:0a:b8:57:50:e5:81:3a:0d:
a5:27:ea:93:30:ad:ff:cd:ac:75:3d:4e:4c:01:da:
90:a8:cd:c4:33:a5:73:45:97:27:ec:63:95:02:1d:
18:a8:5e:67:87:70:6e:d5:1f:ac:e0:64:4f:96:4b:
96:41:3d:d4:70:14:72:1e:ee:6d:ae:bb:f6:2d:4b:
7a:f2:4a:67:4b:6d:b3:43:92:d1:5d:78:02:54:51:
da:c7:7e:fb:44:8e:60:4a:81:c2:b3:23:47:d7:67:
ac:5c:3a:36:91:f1:8d:d5:62:5f:27:7d:9b:77:df:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.116.0/22
IPv6:
2a0d:7900::/29
Signature Algorithm: sha256WithRSAEncryption
30:59:08:38:1e:98:68:4a:14:b3:d6:67:3d:73:ce:1e:67:70:
4e:7c:f7:68:8f:e5:d9:eb:f0:79:bf:40:45:a8:76:1c:a5:06:
14:a3:79:5d:70:86:9a:8a:88:64:8a:3e:e3:93:62:2a:9e:86:
87:d7:08:fb:01:df:ec:ba:63:ae:10:f7:a1:2f:02:1f:c8:10:
29:e5:c6:1e:2c:08:ab:98:a0:99:4b:f5:a9:ae:0c:55:91:3f:
cf:00:bd:1b:2d:a6:36:e1:29:7d:69:ac:25:ed:57:5f:23:84:
62:2d:f3:fb:ff:16:8f:47:23:75:d1:b1:43:24:2f:01:58:88:
3b:bd:fe:5d:e6:2e:e1:57:f2:2b:3b:4e:07:8a:0c:7d:2c:62:
3d:02:92:36:35:fa:21:fa:8e:2f:d9:7b:0b:09:cf:fb:83:be:
eb:e0:1c:2b:d2:cf:87:55:89:19:3f:f8:19:33:5f:97:7f:93:
14:c4:9a:3c:01:2f:aa:4d:fd:72:38:ce:2c:05:d0:0f:c7:cc:
73:c0:6e:1f:9d:e8:e5:99:4b:93:7b:89:55:3e:5a:90:b4:4c:
a9:2f:ee:27:bd:bf:fb:e0:0e:1a:0a:1c:d4:1d:8c:3c:bf:87:
c4:b0:cd:db:c1:7d:67:c9:50:ae:3d:58:cb:5f:f5:14:3a:65:
0f:15:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:54:01 2024 by rpki-client on console-ams.rpki-client.org