Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
File: fJEmcywvAZO8PeTo06vBX0uu1i0.cer (raw, json)
Hash identifier: FFHuPfPrIq71YPURUVneiucfL+hmhQrnnNY3wQ78dVE=
Subject key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4256345ED1352235AF2AD0840464A87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215927
IP: 5.252.8.0/22
IP: 2a06:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:45:ed:13:52:23:5a:f2:ad:08:40:46:4a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:94:9c:65:33:a6:8a:89:67:9f:a7:29:cf:
51:e4:e1:96:d0:f2:97:95:76:88:35:57:0a:ae:a1:
8c:7a:35:16:0e:5e:a2:72:3b:f6:64:e7:89:8c:71:
3d:b8:4c:32:4a:a3:35:05:71:7f:22:6e:b3:8a:31:
6f:7a:e1:1d:55:9a:1d:3f:82:24:62:30:f0:d7:1d:
25:5f:9f:ad:07:40:0b:88:6c:34:3b:1a:0d:46:fe:
63:99:38:eb:bc:74:a0:fe:1a:b3:47:fe:81:17:53:
30:e3:2b:43:e4:ad:d9:48:b9:37:3d:bd:e1:2f:f8:
36:f7:cd:5a:43:c4:7c:a1:c8:8b:66:a4:99:b3:9a:
dd:3a:a8:68:1b:4c:5b:f7:5c:11:31:01:e2:8c:25:
a8:4c:b4:b2:0b:c9:30:a5:66:23:53:a1:4e:97:12:
5f:42:64:4e:c7:26:a7:9b:84:df:41:0e:2c:28:cc:
a1:29:19:55:ff:05:ac:98:84:69:45:fe:31:0e:56:
5f:1e:41:0c:68:e7:c0:0e:0e:20:5d:3d:36:06:18:
1a:fd:9c:c7:88:98:37:72:f9:cf:f7:ea:e5:db:0c:
da:36:08:88:ac:2c:56:e5:8a:fa:7a:04:b3:f3:ce:
8e:c4:08:b5:50:5d:e5:c1:41:a8:be:cf:9c:76:fa:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
IPv6:
2a06:f6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215927
Signature Algorithm: sha256WithRSAEncryption
8e:f3:94:48:60:1e:4c:60:5d:2e:12:df:84:1d:75:f9:36:1c:
b7:0a:52:fb:90:d0:ec:55:24:cf:18:15:8c:a6:08:91:27:d5:
c8:c6:95:a0:4a:16:bd:60:19:eb:ee:e0:d2:9b:6c:44:d2:6b:
63:b7:63:c7:ba:5b:c3:03:80:1b:ec:a3:38:8a:31:23:94:2f:
0f:1e:02:90:22:44:9c:07:1c:af:b1:2e:7f:19:73:08:df:4d:
f8:a2:02:dd:5c:6a:4c:ae:04:83:63:d9:48:de:d9:b6:44:5b:
96:b5:43:db:4a:b8:25:17:8f:f4:3e:69:d1:3e:df:ec:3b:3c:
07:84:13:a2:04:9f:90:4c:45:7a:90:5a:35:43:3c:67:3f:b7:
cd:c9:95:65:44:ac:43:fb:ec:3f:bf:7c:74:da:33:4d:60:4f:
75:b9:8b:41:b3:f5:d3:cf:a5:61:33:34:e1:ad:3e:5b:42:30:
fd:e2:2c:2f:3f:4f:b3:51:65:e9:06:f1:b1:7d:17:9c:9c:fd:
75:ef:fb:bc:10:71:ad:ce:ec:28:59:1d:fc:18:e7:4f:dd:47:
26:46:2e:58:05:9f:4b:5a:98:78:93:e8:b4:60:ab:1c:f6:af:
3e:b9:05:e8:6c:a0:b6:a0:c5:cd:3d:2f:97:37:5a:77:05:6f:
72:aa:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:08:19 2024 by rpki-client on console-fra.rpki-client.org