Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
File: ewl4xBLath77LbVBGwaWDAnhenc.cer (raw, json)
Hash identifier: hHtNL3ST5YnnwtM9r+TM/w0XwxkTPqYfYpY0S3hPyFo=
Subject key identifier: 7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB738DA97CF54E183B39B5E86948C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48710
IP: 94.125.136.0/24
IP: 94.125.142.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b7:38:da:97:cf:54:e1:83:b3:9b:5e:86:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0978c412dab61efb2db5411b06960c09e17a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:3b:ea:59:86:09:79:92:5a:15:8a:0d:e8:
fd:03:9f:44:d0:98:f6:b6:3f:8a:f1:44:6c:c5:2c:
e4:4c:5f:bd:ec:39:85:3e:fb:f2:f3:9a:b2:ec:c4:
d1:81:05:b8:35:f0:58:29:ce:8d:c3:6e:b4:cd:3c:
d2:44:f2:c6:7e:fa:54:d3:74:e6:e8:0b:53:76:a0:
64:f2:61:6b:ad:7a:2d:04:5f:c9:7d:c7:05:91:f3:
9d:6d:86:b5:1b:8c:67:aa:db:53:49:95:76:a3:4e:
17:f7:d0:61:53:a6:21:09:b5:60:b6:bd:80:5d:a3:
9d:7f:68:aa:e7:bc:eb:59:4f:54:92:02:f3:1f:17:
c9:68:c5:a2:0d:3b:be:38:39:5f:ef:6c:a9:5f:0c:
f9:27:69:87:b4:21:2d:f6:b1:a0:42:31:28:a1:2f:
5c:7d:b2:6a:86:d5:f9:74:8e:1c:c0:15:1f:dc:ee:
d9:5f:96:6e:fb:21:d0:86:5f:d7:09:ee:3f:ea:c7:
5d:2b:84:7a:29:bd:33:6b:36:7a:97:20:34:cb:3d:
3a:2d:97:b4:c8:43:87:ad:55:6b:2a:98:0a:26:6a:
af:76:d1:d5:73:fc:61:ec:df:ef:8b:ca:ed:4b:11:
1a:62:e0:a2:34:3a:67:e1:78:8b:99:d8:24:b7:5c:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.136.0/24
94.125.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48710
Signature Algorithm: sha256WithRSAEncryption
52:c5:39:ec:5d:84:fa:17:5a:e2:43:1f:3b:d0:b2:ad:78:8d:
eb:c0:d2:18:ca:1a:42:ee:4a:89:9a:75:60:0d:2d:00:ee:ff:
00:dd:86:b3:c0:d9:81:62:94:7e:dc:fb:24:65:53:ed:1a:f3:
d4:bf:e0:6e:74:d5:f8:26:bc:13:e7:82:fd:75:89:2b:24:ba:
71:93:d0:c8:02:96:8e:46:b2:a0:62:86:26:75:0c:fa:4b:35:
1d:40:52:d1:9b:00:d0:11:1f:2e:a3:48:34:ea:ea:74:aa:24:
b1:14:75:45:57:15:37:44:3b:6d:15:1a:7e:78:ff:36:85:8c:
3a:33:7f:97:33:12:c1:e6:45:ac:68:a9:48:78:89:dc:1e:b0:
ab:c1:fb:d7:64:e6:8c:49:4c:37:46:17:ee:5e:37:73:23:b0:
f0:bd:10:b2:d4:91:29:ba:33:85:6e:ef:50:7a:dd:96:1a:25:
c6:15:68:1d:9d:f6:8a:34:c2:10:e8:a8:59:7f:f0:92:9b:77:
b3:52:3c:ec:27:5e:42:f5:31:e7:30:fb:ed:68:77:bd:89:4d:
f2:bd:c7:73:75:98:ae:6c:0c:cb:d4:73:c1:81:40:27:46:56:
b8:bb:00:2f:7d:cf:ba:ff:46:fa:b7:d1:c6:7b:39:e3:2e:a6:
9c:9c:20:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 08:05:45 2024 by rpki-client on console-fra.rpki-client.org