Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.cer (raw, json)
Hash identifier: TY7G64Ucf7qOvLUJi7UQjijxe1trjgBMfvEf8b16h7s=
Subject key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B61E0288F35FA44BB1508D4913BCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42970
IP: 91.213.25.0/24
IP: 185.140.196.0/22
IP: 193.200.182.0/24
IP: 2a07:1fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:61:e0:28:8f:35:fa:44:bb:15:08:d4:91:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:d1:03:92:0b:53:19:f0:08:6e:a0:e6:87:
9e:28:ce:4e:1a:22:b7:70:43:54:4f:c3:65:e1:97:
49:18:2d:28:ad:47:00:7a:12:ec:b2:13:10:f9:13:
6e:d5:f3:bd:ba:fc:1f:af:81:b5:fd:6b:de:6c:c7:
1a:cf:5f:37:85:e4:ab:80:35:5d:c3:b0:fb:13:14:
c5:fe:68:ff:a9:9d:59:32:7c:14:8c:a3:98:2d:99:
c4:b2:fc:58:08:73:58:18:c1:0f:75:10:7a:4f:bc:
de:5d:fc:d0:4d:24:50:64:1a:ba:8b:45:65:e4:9a:
a9:ed:46:9d:7c:05:09:b5:0f:d0:8b:9b:ea:20:d7:
e3:55:fb:64:03:32:36:b5:99:1a:c0:21:cc:b8:b6:
59:bd:6d:0a:21:1d:90:aa:45:3a:b2:28:d9:15:4c:
cb:23:f2:37:02:7c:5c:8e:1b:76:cf:ea:95:f1:d3:
93:b2:b1:5e:d6:32:7e:8e:33:9c:b4:cd:fd:1a:d4:
cd:4f:77:f1:f5:2d:2f:51:e9:40:29:83:bd:ab:00:
70:b4:fd:0a:85:a8:68:41:6c:d3:61:c2:1b:80:fe:
55:21:76:c0:9f:5b:b7:63:88:65:d4:54:b7:50:63:
0c:57:42:3e:8e:c5:c2:81:20:95:51:ac:61:43:b8:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42970
Signature Algorithm: sha256WithRSAEncryption
0b:3c:0e:c8:c7:79:5b:49:44:35:dd:d7:78:6f:b6:44:ca:a9:
f6:8c:b4:8b:b7:b8:21:74:cf:53:c7:a4:cb:68:e4:69:d2:ff:
0f:1e:5b:cf:04:3b:cf:86:03:e4:d7:a4:c9:9b:8c:97:c5:a0:
df:20:19:0a:b2:b3:fe:19:ed:28:31:c2:b5:4e:c3:da:c0:c3:
a4:e2:b4:f6:76:65:00:ac:51:32:ee:34:9b:cf:7e:01:3c:3d:
32:7e:33:86:23:06:c0:7d:3a:9e:6f:47:26:4e:b9:90:b7:34:
5d:e1:7e:94:5b:5c:b2:6c:3e:f7:02:d6:9a:bf:44:e8:b7:72:
cd:7b:f7:f1:c2:db:16:fa:17:d9:31:45:de:a6:df:73:1b:3f:
74:e5:f0:e9:b0:62:c3:92:34:12:65:29:84:af:61:83:33:d6:
9b:44:55:5b:a0:52:fb:31:25:0b:4d:2a:c8:fe:e0:ed:e8:d3:
c9:42:f4:16:3c:83:83:6f:b5:73:5b:01:74:43:f9:ef:94:60:
02:e8:3d:62:08:0e:d4:16:93:fd:e9:4c:e2:f3:7f:93:ed:78:
d5:8b:c5:79:f2:d5:92:fc:1b:e3:4a:58:46:35:9d:23:b7:d3:
cf:51:3e:6b:a6:8d:1a:2f:3d:6f:c2:74:09:24:93:bf:40:44:
e6:fe:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:36 2024 by rpki-client on console-fra.rpki-client.org