Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
File: pyEILICrr5X61-pg88XsDgXijtw.cer (raw, json)
Hash identifier: 2LmrC9vFr+MkOD7p9LGPnuy2ytsxy+/afsOxBCBzcXc=
Subject key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56F01141CAD12BF0807762E83D02798
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211779
IP: 82.116.192.0/19
IP: 185.235.252.0/22
IP: 2a0d:8700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:01:14:1c:ad:12:bf:08:07:76:2e:83:d0:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:13:90:9e:86:ba:f7:0c:13:75:f1:44:d8:
20:36:9e:b0:be:cb:49:f1:b1:56:ba:16:d3:57:76:
aa:3e:1a:9b:e8:c8:80:62:e6:1e:28:79:4d:93:e0:
65:b5:5d:13:e5:77:32:01:bd:de:a5:ef:24:8b:e3:
23:74:10:7d:f0:4e:30:39:8a:d0:35:86:1a:1a:e8:
e2:27:a6:ab:23:dc:2f:a3:83:86:a2:63:fc:5b:25:
e8:71:27:c1:cc:32:c4:ac:92:d4:6b:5b:a5:68:7b:
ac:22:7d:61:64:c9:82:2e:88:5d:c3:87:5c:61:20:
ff:de:60:b5:27:77:d7:ca:16:48:32:9a:26:1f:d9:
72:e1:9c:9f:5b:59:4f:18:86:ca:01:06:4c:e9:2c:
8a:49:c5:77:41:ac:fb:7f:14:10:bc:31:9c:64:c1:
a8:d5:94:e8:c3:34:34:bf:5a:a5:13:25:31:dc:88:
8b:cf:4e:81:6f:a9:de:ae:49:b1:a3:46:3c:0c:30:
f2:c4:2b:fb:6e:15:01:7e:7f:16:65:99:63:5c:19:
6f:cf:00:ca:28:84:fe:ef:9d:a0:94:10:3b:57:57:
2f:4a:c6:a8:04:55:12:17:42:f1:ab:27:f1:f5:fc:
5d:49:ce:b2:75:be:62:c6:d9:66:ce:d2:90:1c:50:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.192.0/19
185.235.252.0/22
IPv6:
2a0d:8700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211779
Signature Algorithm: sha256WithRSAEncryption
91:c7:72:7e:70:f7:63:6b:b2:3a:4d:e8:0c:5b:aa:95:3c:b5:
e4:eb:77:a9:50:20:bd:6e:a9:0b:6e:62:92:3f:d3:58:36:a7:
ee:7f:61:4b:5a:53:95:28:be:3d:2e:f3:25:0d:c8:8f:08:43:
18:4d:7c:3d:33:c8:1e:4a:2b:ab:7c:97:59:45:4c:11:77:74:
bb:6d:fb:d6:62:ab:ef:b9:09:1f:be:9c:1d:80:45:02:ce:49:
b2:68:83:a3:c9:0c:d7:67:23:80:85:29:8e:2e:e2:f5:72:ce:
dd:d3:10:ca:8d:b4:e7:d1:00:83:ab:d3:81:c0:b3:d3:7c:07:
0c:78:dd:4c:eb:b1:a5:cd:f7:d5:ba:6b:22:d1:02:d2:89:8f:
f3:69:bb:43:ad:2c:c7:ca:5b:2a:72:16:da:b1:ac:58:ef:93:
a7:b6:5f:30:8b:b3:fb:5b:84:e6:69:c3:49:ba:48:36:65:9d:
3c:9c:2a:7e:62:21:10:6a:fb:8f:67:63:e1:b0:28:59:46:08:
6d:e7:5b:23:87:74:08:dd:f9:c4:48:92:e1:e0:78:d0:30:b2:
9c:27:41:fd:e8:39:71:37:b3:5e:c4:83:88:c4:b5:b2:86:fa:
c1:4c:f8:ed:e4:11:81:51:1f:3b:d0:2a:57:3d:55:76:3b:79:
ff:97:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:59:50 2024 by rpki-client on console-fra.rpki-client.org