Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer (raw, json)
Hash identifier: WdbzQ2q6/4dIca76SjNF5rgeGD8c6fcfUjQqCxMUAP8=
Subject key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425590547BEE0E8A6F5A325ACF1AEF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50136
IP: 185.79.88.0/22
IP: 2a05:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:05:47:be:e0:e8:a6:f5:a3:25:ac:f1:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b243b732e564690482cc825199f8b591b01f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:63:f4:39:e4:12:43:54:e1:e3:11:c0:17:
16:c1:e5:64:35:65:ae:e2:a4:db:51:bf:39:0a:b5:
8e:f6:22:2f:00:fa:a3:5a:27:48:58:32:ed:db:01:
75:da:22:9c:5a:90:bc:6e:63:8c:fc:c1:bf:8d:a0:
85:6b:48:1e:5d:99:d7:2c:96:1d:e7:54:a9:eb:b4:
e8:2f:23:4a:7d:28:7c:10:72:7b:63:b0:5d:6f:ce:
40:c2:2b:71:51:b0:07:7d:b0:33:b0:cd:83:e6:39:
e6:ab:1d:e6:3a:f7:70:91:21:40:21:48:7f:89:95:
99:fd:ed:2f:b5:5b:44:f0:af:60:8e:b5:10:3a:a7:
54:58:77:73:89:a1:18:90:5c:92:a2:f4:ae:c9:1c:
0b:79:7b:23:15:36:2c:29:cb:39:32:a5:d1:3f:b3:
5e:4d:fc:14:aa:6c:46:39:22:b3:0b:e9:31:e4:53:
37:e0:1f:a5:9d:57:09:2c:00:74:e0:ed:e9:3e:18:
98:25:09:c5:f9:6a:30:05:2e:cf:07:3a:09:20:23:
fd:8b:33:9c:3a:0e:c0:87:ea:5c:5f:ad:62:b2:d0:
33:c2:0f:7a:78:4d:90:3f:cb:57:6b:0a:62:44:bb:
13:59:51:b5:50:25:90:f9:b0:08:bf:27:86:4c:f5:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.88.0/22
IPv6:
2a05:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50136
Signature Algorithm: sha256WithRSAEncryption
7f:03:80:f3:08:40:73:fc:b9:49:6a:f6:53:2d:d4:3f:31:61:
04:f4:88:e3:d6:43:7e:6b:dd:ed:fe:7c:03:ee:26:b3:e3:d5:
26:89:0b:52:62:4b:de:7d:a3:37:89:87:4b:3d:b9:22:d9:19:
a1:5f:37:97:43:b6:3b:8d:65:ac:a6:a2:3d:39:41:75:01:f2:
78:e1:ec:86:c6:28:a3:a9:ae:c4:96:8c:2b:a2:4c:a6:29:8d:
66:b4:a1:73:fd:d2:3b:e8:b3:db:5d:d5:ee:94:73:b4:16:50:
a6:bc:31:01:de:76:e2:7c:ac:68:eb:f6:00:74:14:fc:3d:bf:
51:a4:cf:f9:eb:6a:f0:27:1a:ed:3b:aa:0a:eb:50:a9:29:49:
a5:dd:3d:f2:a7:4c:f2:11:4c:07:74:4c:e6:c3:1f:fb:4a:c3:
f9:12:84:a0:49:55:00:30:a9:e2:9f:c7:10:5f:03:49:0d:d3:
77:56:0b:0d:72:da:50:25:d4:12:55:e5:ab:d7:aa:5b:1b:b8:
e9:89:c1:b9:b0:7a:c5:19:98:ea:62:9e:d6:61:cb:98:71:75:
69:25:40:09:46:55:36:18:0c:cc:bf:e1:97:2f:9f:c9:c4:b1:
0e:31:46:27:eb:da:fd:fc:33:38:62:23:23:d6:0f:f4:fe:62:
a0:38:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:28:31 2024 by rpki-client on console-ams.rpki-client.org