Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
File: t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer (raw, json)
Hash identifier: t74YGSojCQ7Zlns3Y5iKqDZ586++b/OmpTb+Sjvaf1Y=
Subject key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802281ACEFCF7C36ACE8D3CB4E5D6F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210545
IP: 217.119.138.0/24
IP: 2a11:7b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:28:1a:ce:fc:f7:c3:6a:ce:8d:3c:b4:e5:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:71:fd:61:33:bf:07:43:f6:fe:9b:48:f5:
7f:13:ec:bf:7d:b6:03:bb:21:68:b4:58:fe:8e:a3:
2a:7c:3d:34:7f:15:35:41:29:9f:07:77:bd:15:45:
28:1c:63:78:76:73:bf:4a:00:76:df:ed:89:8d:56:
72:ae:3b:0d:bb:46:48:10:0d:94:f9:64:ef:74:b7:
85:ec:cc:0e:8d:11:e1:4b:14:c7:e1:cb:47:a7:68:
a6:bd:5c:37:f9:19:3b:69:90:43:98:9f:9f:b7:a8:
d4:a7:46:0d:ec:9b:ad:6f:13:ee:46:fc:c0:52:2c:
64:ed:ed:dc:b4:d7:6d:42:06:07:7a:2d:d0:31:5c:
4c:cc:38:a6:61:ed:4b:06:8b:0f:88:d7:83:bd:b9:
aa:fd:55:4b:c9:c1:ce:63:c5:e7:3a:e6:a6:02:a5:
60:8a:ce:52:2a:93:0c:a0:fc:0c:8f:22:c7:2e:e7:
c2:c2:a6:e9:ee:c4:12:13:d7:95:f6:b3:fa:cc:0d:
08:6f:de:7c:7f:e0:92:5b:3f:d0:0a:c1:35:44:bc:
90:dd:27:5d:b1:4e:88:a4:e1:67:54:b0:39:2e:a6:
a8:af:1f:12:cf:5d:9a:57:d4:39:46:28:11:e7:94:
7a:f8:c5:2a:17:ad:40:7f:f8:81:21:dc:09:60:a1:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.138.0/24
IPv6:
2a11:7b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210545
Signature Algorithm: sha256WithRSAEncryption
20:f9:85:7a:d5:3f:30:ca:8e:56:20:e9:6e:32:4b:56:68:d5:
63:ec:8d:50:82:02:27:70:1d:cb:07:35:5b:df:31:07:77:f7:
41:4b:ef:0d:50:61:d5:ee:83:85:3a:27:ec:66:91:74:8d:55:
b1:a5:a9:db:2e:7e:ce:e5:1a:5f:1b:66:25:51:10:8c:ae:58:
1f:75:23:1e:a5:23:40:7a:17:71:df:9f:b8:7f:2d:97:9c:27:
11:72:ae:ab:62:02:c9:dc:fa:f1:83:cd:13:62:d2:18:32:90:
91:3d:d7:fe:3b:a5:f9:87:26:85:4e:7a:0e:ae:8f:d1:4c:11:
70:9b:8e:8f:8d:d9:6f:73:35:7c:17:65:5a:55:0b:55:01:41:
55:9a:a6:38:7e:71:1f:e3:df:02:ad:62:6e:2d:45:3b:5a:8f:
59:a3:5f:bb:88:12:3f:fd:fa:2b:1d:dd:48:e0:9b:bb:dd:82:
60:95:a4:6f:7e:38:d0:a8:c1:4e:a4:2e:cc:be:bd:fd:f3:6d:
30:ef:c7:cf:7d:45:09:27:fd:23:d4:4b:55:b6:74:bb:d7:70:
ea:0c:cb:8a:40:85:a7:8d:17:86:ab:19:17:ae:3b:f8:8c:66:
c4:e3:35:34:21:7c:33:c6:c6:44:71:22:80:77:60:25:19:4f:
5f:32:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:05 2024 by rpki-client on console-ams.rpki-client.org