Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
File: u-Eo3LaBD_3FArowR81BkTLaInQ.cer (raw, json)
Hash identifier: DqAHgA2LSLTQrxCOT+3Z0JDdnY27gUQsPYPQ+O1SrXM=
Subject key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B5F5C235B9B4BF1B6B33437391272
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25460
IP: 5.61.120.0/21
IP: 45.154.208.0/22
IP: 185.118.28.0/22
IP: 2a01:5ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5f:5c:23:5b:9b:4b:f1:b6:b3:34:37:39:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:03:fb:6a:6e:70:da:f8:6b:ab:8c:57:49:
af:6e:b3:2b:7e:b0:df:37:49:69:6e:e7:ee:68:5e:
d2:a5:e1:69:ca:f0:de:2e:9f:7a:b7:b8:65:fb:9a:
f3:ad:7b:fd:ad:17:dd:c1:8d:1c:ec:35:c6:16:80:
23:c8:d5:67:9d:b2:6b:f6:39:7d:2c:57:5e:5f:e0:
33:9b:56:d6:da:1c:fb:51:e4:96:4f:36:be:2c:20:
0c:13:54:13:33:06:40:9a:27:39:c0:27:94:7a:6c:
b0:2b:56:e4:4c:ca:e9:1a:09:2b:46:85:10:be:51:
89:59:64:6c:85:68:d2:df:2d:4c:17:02:e0:6a:cb:
da:6b:b7:a6:55:5d:e8:6d:12:12:1c:b8:e0:d1:1e:
36:b8:84:a6:bd:ce:a3:33:5e:fb:84:b9:a7:ad:09:
f1:8e:b6:f0:b2:c8:e3:6d:b4:9a:08:81:64:52:ce:
11:9d:f7:b1:5b:ce:da:3d:4d:2c:de:ea:3c:3d:c0:
2b:6a:6e:d4:4f:2d:5f:0c:b8:33:68:c0:ec:fb:9c:
8b:c0:77:9e:ae:b2:72:1c:3b:8f:4a:25:f4:73:b7:
68:1f:17:b5:9d:ca:29:be:5b:b8:5b:33:29:1a:df:
5b:e9:2b:46:65:57:67:e2:f9:4e:dd:6d:f6:18:30:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.118.28.0/22
IPv6:
2a01:5ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25460
Signature Algorithm: sha256WithRSAEncryption
78:7b:11:4a:f2:5d:4e:2c:e0:a4:c6:4b:d7:8d:24:67:58:fa:
31:6e:a9:24:ff:8e:ec:3e:13:f2:a6:57:81:11:91:56:b5:03:
13:2c:34:52:66:8b:03:f5:df:c6:24:7c:b3:61:2b:c3:de:ad:
89:3e:62:77:c3:d9:ce:66:3d:8f:51:21:cc:9f:1e:d0:09:21:
e0:08:4b:88:6c:40:a8:fe:6c:f7:39:32:8c:da:5f:2b:99:24:
9f:b0:ae:f6:fe:b1:61:eb:6a:b4:ad:c0:61:97:09:32:ff:34:
5f:cd:a2:de:c1:0b:62:ab:49:ad:00:11:d3:73:61:0f:9b:78:
d4:35:9b:bf:f6:c2:7d:5b:c3:67:dd:46:79:eb:8a:5b:a0:46:
fa:6a:f9:08:23:37:a5:9f:8a:8e:10:e5:4c:30:ec:aa:c9:18:
da:09:3f:f2:1a:de:f9:56:f6:f2:1b:9f:4c:4c:dd:ce:34:c7:
50:19:37:ef:99:a8:3f:ea:30:a9:e2:ed:d7:49:89:e1:8a:29:
a1:ed:f5:6c:9b:8f:52:d4:b8:95:02:db:a2:a0:3c:d6:b0:83:
5d:a2:18:f5:31:0f:ca:b1:c6:cc:19:4c:c9:43:c1:b9:a6:a9:
2b:ec:74:18:72:46:f1:82:2a:bd:e6:2b:70:40:74:61:f9:b2:
75:4f:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:05:53 2024 by rpki-client on console-fra.rpki-client.org