Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
File: j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer (raw, json)
Hash identifier: ZqZZAFNvJat4ZIPW6TuWapxvtDmQcG1TsvsX6o3tmXs=
Subject key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F37ED0844AF61F03025F22E2DAB74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29434
IP: 93.94.192.0/21
IP: 193.200.170.0/24
IP: 195.85.255.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 14:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:37:ed:08:44:af:61:f0:30:25:f2:2e:2d:ab:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:f9:d5:24:0e:55:76:53:2c:a0:5a:64:ee:
49:93:97:f1:64:db:33:70:38:74:52:ce:c5:fe:6c:
a5:b9:af:c7:5a:ee:87:4d:42:be:c2:33:45:d2:bf:
a5:f6:3e:b1:fb:6a:46:ef:b2:14:e5:41:8d:a0:91:
4e:a3:63:2e:72:ad:7e:ad:e8:df:55:e2:db:da:a7:
b1:7e:a9:b1:d7:62:04:5e:39:5c:ce:05:8c:96:72:
5d:6b:59:ac:1e:3d:2b:ee:f2:4e:8d:53:09:e6:d8:
c1:84:12:38:94:c9:9f:59:0f:59:99:b1:85:d1:74:
0d:58:66:bb:42:cf:c4:6e:b7:0f:77:43:6d:b1:37:
0e:a2:4f:84:fd:69:68:1a:6a:90:f6:63:12:97:cf:
20:9f:8e:5e:c9:3d:c6:c6:c0:89:89:e4:14:19:7e:
13:74:67:c8:97:36:e6:68:4c:9f:5f:1a:b0:3e:04:
f1:20:b9:38:da:1f:06:ef:e8:0f:3e:36:5d:aa:28:
bd:e8:68:52:ce:65:0f:31:a1:c7:0b:ad:fe:54:85:
c8:b3:b3:8a:3b:33:bf:cd:e6:9e:0a:87:75:04:e9:
dc:1c:92:ec:df:69:bb:1a:be:d4:2c:0f:3c:65:79:
66:66:29:b3:43:a2:1c:e5:f6:45:11:c1:31:0f:8e:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.192.0/21
193.200.170.0/24
195.85.255.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29434
Signature Algorithm: sha256WithRSAEncryption
68:d8:27:7f:df:33:23:46:3d:30:29:ce:b0:7d:3c:a1:08:1c:
05:b8:8b:6b:e8:ac:90:99:19:da:54:2c:a6:2e:d3:64:1b:d7:
5d:bd:41:9e:c3:ea:b1:e7:94:ef:7a:c6:59:f1:b1:ea:42:61:
bb:18:df:db:c9:6d:38:02:99:ec:9a:87:ca:9c:cc:a6:c9:8f:
bf:b9:c6:86:1d:c5:15:08:10:8b:06:08:85:0b:a5:6b:28:28:
4d:9f:8a:f4:83:54:32:c5:e5:e8:0d:b4:bb:f5:67:d6:fa:42:
2a:ca:3f:04:90:96:79:1c:e3:42:94:0f:15:59:56:43:d6:a4:
21:7f:58:e3:b9:7d:26:66:19:13:22:28:58:cb:42:bc:bb:58:
be:3d:4d:12:40:ed:7c:48:27:68:63:78:41:50:63:28:a0:96:
7b:dd:69:50:ba:65:5a:9b:9d:85:ee:42:5f:d7:54:12:52:bc:
a0:0b:0c:1c:86:b7:f6:d1:96:51:3a:9c:dd:3f:0e:26:25:2c:
b9:79:79:ca:be:72:3e:1b:3e:d0:87:36:ad:b0:04:d6:19:d6:
a7:94:3a:a4:8c:22:a0:3e:d6:b7:77:9f:48:aa:55:7a:21:86:
0f:f2:31:1d:d0:db:81:3b:d3:e5:b4:03:ce:15:4a:a6:b8:26:
de:65:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 17:30:09 2024 by rpki-client on console-fra.rpki-client.org