Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
File: p7He9pWIXq3lzMi0vioCuxYHnpw.cer (raw, json)
Hash identifier: yFRWh+QJHYrkZXkaBOB/vLWTsAPnAHdGHZO36RkwLMg=
Subject key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4932C6EFD85119A96139F9F574F98FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204648
IP: 173.255.144.0/21
IP: 193.17.36.0/22
IP: 2a07:ee40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2c:6e:fd:85:11:9a:96:13:9f:9f:57:4f:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:8b:65:9f:51:c7:05:1a:de:99:f6:1c:76:
11:16:a0:75:9d:dd:1c:7e:64:d2:49:47:2e:67:7c:
e9:92:39:db:ab:c6:0f:6f:7a:74:31:dd:6c:b6:65:
70:6a:8c:3b:d6:e5:06:e9:7f:bb:4c:94:59:12:5d:
57:fe:5b:37:3d:7b:d4:e0:2f:16:43:fd:fd:8a:8a:
f5:db:a3:94:bd:d9:f8:7f:a5:ac:5d:39:b3:5d:cf:
a2:5a:1d:09:db:46:2e:4c:f0:9e:e6:f2:93:e8:3d:
b6:fe:0b:34:e7:91:61:25:ee:19:7d:a5:63:5e:b6:
97:d1:ed:ca:1f:93:8b:10:58:7f:83:c5:2c:c3:cc:
8a:54:69:2e:a1:ae:72:e4:31:09:6d:4e:bd:9b:e9:
06:6f:a9:01:1b:aa:11:0a:c9:f2:c4:9c:91:d5:c0:
4e:48:c7:8f:78:2d:fd:1d:56:7b:39:ff:9a:c0:94:
fb:22:59:2d:64:b0:82:10:7f:63:3d:d3:b4:e3:9d:
97:88:5b:66:7e:7d:ee:63:7e:9d:88:a9:e7:d7:01:
1b:76:2e:80:3e:ea:08:09:99:2b:a4:81:20:ad:46:
66:06:b9:b0:b4:2c:c3:6a:97:a2:a8:65:86:ef:84:
a9:50:40:61:a6:96:c5:cd:df:49:5a:e9:66:c0:2c:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.255.144.0/21
193.17.36.0/22
IPv6:
2a07:ee40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204648
Signature Algorithm: sha256WithRSAEncryption
79:c2:0d:68:22:a2:fc:1c:9c:78:dd:0f:5b:f6:9b:7e:7d:2d:
42:cb:4f:b3:ea:9a:65:59:22:4c:1f:31:c1:0d:9f:76:60:58:
41:8a:e9:11:41:c6:2a:07:02:cc:41:93:d5:87:0b:bb:83:b8:
7e:b5:c3:8c:e3:19:92:fa:67:69:a5:9a:88:28:24:23:2a:1c:
56:2c:b8:f3:87:5d:02:bb:72:1f:77:13:64:8d:5d:db:f1:80:
47:19:81:71:38:da:9b:f6:83:85:ae:ca:d4:ae:7c:62:70:bb:
67:d7:c8:61:b2:be:b0:d0:9f:d7:da:02:e0:44:ce:fc:8b:9d:
2c:00:b6:33:43:ff:26:a1:80:21:1e:a7:06:0d:7b:62:02:fd:
22:c7:be:33:4a:1d:df:b3:55:52:b1:3e:b3:79:70:68:6d:51:
28:69:54:0c:0a:a3:57:cd:47:cd:46:7e:ed:7f:2d:e1:c0:71:
95:5a:c1:8b:76:4c:d4:7e:28:44:e6:97:83:1a:ac:64:03:f6:
83:b7:5c:1b:43:64:97:10:01:25:aa:69:0f:f5:b4:32:46:d4:
81:7b:62:ba:08:05:aa:56:23:26:1c:0c:9f:ed:a0:34:8e:07:
91:e8:e3:61:c9:dd:af:ac:9d:bb:c8:82:9e:91:78:b3:f5:ce:
5e:3b:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:06 2024 by rpki-client on console-ams.rpki-client.org