Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.cer (raw, json)
Hash identifier: bGvhuFpV03rflJy94LnK1+tlSU77WY/w0nLI8CmJGMM=
Subject key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD10C69B6E25BABD12E32C9B74EDB2092
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 13:41:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59701
AS: 200997
IP: 79.171.144.0/21
IP: 185.147.72.0/22
IP: 195.5.160.0/24
IP: 2a06:d480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:0c:69:b6:e2:5b:ab:d1:2e:32:c9:b7:4e:db:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 13:41:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:e4:1b:12:7c:da:d8:74:e1:30:9c:f6:28:
25:82:c0:11:99:3b:63:87:86:3b:22:be:0b:c7:8c:
db:87:15:8d:ed:8c:6b:82:44:7c:37:d2:88:7b:76:
3b:0f:10:94:31:cc:2f:c0:e7:c4:47:7b:2f:92:ec:
70:e0:2c:2f:6c:64:ec:55:d6:24:ea:a0:3e:a9:01:
bc:e2:55:5c:7e:d8:b5:bb:1e:a3:83:b0:b6:08:10:
6f:3b:30:ad:51:4f:c4:15:e3:5d:0d:31:43:07:24:
7c:95:c5:b7:91:84:16:36:a0:b9:59:0a:27:19:5f:
fc:d8:57:cf:95:de:a6:5c:d8:f5:28:52:6d:dd:cf:
fe:df:2e:92:bc:48:d8:4c:83:d9:76:e9:da:de:c4:
8f:bf:0c:c3:a7:4a:b6:9b:b2:8b:b1:80:6e:62:00:
a5:f3:08:2b:04:83:d3:58:0c:50:93:58:44:df:db:
04:b3:1d:33:c4:6a:d5:0f:99:1d:eb:da:18:04:67:
66:ac:dc:c8:07:2a:32:e4:81:71:6d:7d:68:29:46:
a6:5b:74:77:23:14:3f:aa:04:aa:ff:57:25:09:ef:
fc:e4:5e:e7:6a:66:49:56:51:00:f6:7a:61:c3:c8:
83:14:4f:1a:45:bd:1b:44:2a:34:4c:4f:66:85:48:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.144.0/21
185.147.72.0/22
195.5.160.0/24
IPv6:
2a06:d480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59701
200997
Signature Algorithm: sha256WithRSAEncryption
4c:2c:09:2b:11:11:ea:9d:77:bb:f8:11:c8:6a:92:15:03:13:
d5:6a:e7:14:82:85:84:ea:37:84:39:ee:b3:cd:d7:cb:e9:23:
7d:d7:61:5f:fb:6a:3b:ed:f2:3f:ea:d2:cc:e1:67:cf:70:89:
30:5d:57:54:ab:38:ca:99:0c:a8:41:3d:f1:26:54:09:22:4f:
30:80:4a:13:fb:24:81:31:35:18:37:cd:12:bf:91:ff:4c:25:
f6:46:cd:6c:1a:4f:a2:c4:04:00:de:73:65:b2:14:55:fd:ad:
f8:46:eb:e7:98:ab:ed:74:dc:bd:f9:a7:82:36:69:cd:96:96:
0a:20:43:c2:03:f2:f4:5a:fc:c6:9c:e2:ce:c1:31:70:26:f0:
e7:bc:2f:96:ab:dc:f7:9a:98:fc:07:74:2e:da:99:00:50:a7:
c6:40:db:dd:a5:a2:4b:aa:4f:fe:d8:85:66:13:83:9a:a5:6b:
8d:0e:f5:22:26:88:c3:97:2a:6c:00:00:72:6c:8c:bf:70:e6:
e0:8f:27:ae:3d:ec:9a:db:8c:71:0c:0c:08:60:01:91:a8:19:
31:72:c0:e7:8b:b9:0a:36:3f:ce:9d:c7:cf:68:12:20:ad:1d:
9c:23:09:e6:4f:b3:a2:3c:0c:a2:2a:a4:35:6a:13:e0:c8:c9:
45:a7:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:07:53 2024 by rpki-client on console-ams.rpki-client.org