Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
File: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer (raw, json)
Hash identifier: atSn9zSy8u51G4KNQlZPagYv30F5vHD+272RQN9b1bA=
Subject key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCC1158FC9FE825D2E98D4BE848B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31531
IP: 193.16.101.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c1:15:8f:c9:fe:82:5d:2e:98:d4:be:84:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:9f:ac:f2:31:05:64:ae:2e:d5:a6:f7:60:
dc:fb:b2:ca:19:2d:c9:0e:67:68:79:a7:04:15:88:
01:03:d2:0d:18:db:9e:eb:a2:9a:45:50:d5:45:6d:
f3:67:16:0a:ef:20:04:35:e6:2f:b2:5e:07:60:11:
1f:5b:b9:3a:4f:2d:ee:12:06:78:b2:10:f0:77:5f:
13:e0:42:19:4f:02:b3:72:ac:c4:36:58:fc:f9:d0:
66:de:74:d7:30:ed:e4:54:f5:8f:48:6e:bc:26:75:
ef:68:af:6a:31:42:08:f6:bb:dc:b5:6b:c0:94:70:
9f:c0:25:2c:64:1f:bf:51:3b:7b:74:42:23:e7:e1:
8f:e6:c1:e5:6d:46:77:f0:5b:2e:f9:c5:9d:ce:1b:
09:c3:47:1f:15:ac:d0:b7:da:7a:2d:66:94:0a:de:
fe:07:18:35:30:d3:30:76:ff:dd:9b:96:98:4c:44:
c5:0c:ba:82:7a:be:22:4f:e0:e8:79:8d:9c:ca:62:
07:22:95:12:6e:06:5e:f6:38:9d:15:83:09:76:6c:
a1:3c:3a:c4:65:bb:37:11:49:e0:1b:b0:67:5a:b7:
a8:7a:46:16:bd:a6:6a:e0:3e:d9:16:1c:c8:2c:05:
0d:83:a6:2e:3c:af:41:9f:74:97:2c:98:b3:ca:01:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.101.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31531
Signature Algorithm: sha256WithRSAEncryption
53:01:e5:ba:f7:75:a4:a4:63:d5:d2:eb:84:18:60:25:07:8e:
67:45:f7:49:10:5a:cb:14:01:b2:f8:c5:b3:12:9e:7d:1c:6a:
8c:42:ef:71:31:b4:ef:a2:43:1d:19:f6:96:f1:5d:5a:32:3a:
cc:5c:1d:2e:2d:16:91:ad:04:c7:a6:7a:44:c0:d0:c7:63:1f:
4e:eb:db:69:95:10:c3:86:06:ff:72:c0:d8:e3:2b:0e:65:0e:
c2:40:d9:ee:99:92:a0:b5:76:e0:e2:30:3a:e4:1c:99:5b:27:
6c:e6:a8:c4:97:e9:2c:c0:78:6a:ac:5b:42:a0:ca:10:01:18:
53:58:5b:3f:37:cb:97:4d:c9:15:ba:9f:3a:31:67:fc:4a:9b:
8e:62:87:ba:62:6f:92:b1:6e:e2:47:94:90:b0:26:f1:80:d1:
e9:28:6b:66:32:99:5b:8e:02:5d:38:87:f7:70:e4:75:87:65:
0a:4f:d6:bb:89:3a:7e:d0:80:1a:b8:21:36:18:1e:f7:8b:0c:
bb:cc:a0:3f:1d:20:84:1d:f2:a0:e8:b1:b9:66:3b:0d:51:29:
fb:a0:7a:23:c8:b8:c2:cf:54:de:92:32:a7:a3:7e:b1:32:79:
a8:61:33:3d:30:de:b1:f6:ac:1d:4a:c8:49:72:66:f5:40:8a:
76:b6:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:06:06 2024 by rpki-client on console-ams.rpki-client.org