Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.cer (raw, json)
Hash identifier: PQhPVublO5Vy94Zfg3yBNPj9HUoRNwAZxOwOnwSrvQY=
Subject key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726EC8B66EEA6FC4AD8588E3E3A3B27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208337
IP: 45.143.180.0/22
IP: 2a0e:ecc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ec:8b:66:ee:a6:fc:4a:d8:58:8e:3e:3a:3b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f261df44b346823cce8c6643b5fa6919afb23195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a1:00:8f:4b:8b:d3:ac:19:f7:75:ff:b6:7f:
d0:3e:68:5c:31:97:13:23:bb:22:d7:15:0e:74:f3:
73:19:1e:64:f8:4a:4d:99:f4:16:01:68:32:20:ae:
95:fa:0b:39:2e:8c:e4:2c:10:df:b2:2c:24:69:d9:
f9:37:05:ea:89:ae:68:0e:77:1c:e2:0a:bd:d1:d8:
44:b2:5f:4a:e2:a1:b2:a9:6a:0f:4b:3c:24:c6:62:
50:cb:e8:b7:b1:f6:43:b4:08:97:76:44:5d:32:5d:
77:18:a9:cf:08:99:e7:4d:25:ed:51:92:62:b5:ea:
c1:56:cb:93:cf:1a:b7:bb:1f:bc:98:2a:b8:b5:7c:
99:f5:4d:40:d3:2a:9b:09:04:b0:5b:90:e2:8a:2f:
1c:27:10:36:89:25:ea:27:9d:76:4c:84:eb:e2:1a:
08:c8:b8:81:41:f7:7a:ca:e6:b6:c9:66:da:e7:01:
ae:b4:34:03:fe:e5:9c:3a:c8:a2:7d:dc:cb:dc:c9:
cb:87:68:2d:ee:24:5a:da:86:73:d6:05:35:48:5e:
17:9d:b6:0b:78:c6:3c:ee:a1:8d:16:86:64:30:27:
e2:06:c3:39:e8:2d:93:61:38:0f:56:92:e3:29:45:
54:ee:5e:33:33:2c:4f:4e:5d:e2:49:05:43:cd:e9:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.180.0/22
IPv6:
2a0e:ecc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208337
Signature Algorithm: sha256WithRSAEncryption
52:c7:3f:fb:3c:26:e0:c4:0b:04:79:db:b8:dd:51:04:30:b9:
21:88:20:88:ea:d1:50:c5:08:42:c4:2e:1d:a6:ff:50:b7:5f:
b7:40:29:a9:8a:37:bf:b8:3d:59:19:4f:eb:95:c5:65:4d:f8:
c3:11:67:e1:35:82:4c:08:61:0e:e2:f5:b6:4c:b3:ef:ee:24:
4e:ca:7a:30:4e:3d:ac:3e:d0:fe:99:29:15:40:7c:68:2c:15:
82:dc:cd:97:e6:a7:eb:c4:34:e8:a5:06:24:e1:b5:c9:ff:40:
ff:00:06:37:20:91:24:8e:d0:9b:ee:ba:8c:f7:bb:ba:f3:3b:
c1:4d:6c:93:ca:49:05:d2:e4:78:06:f9:20:5b:d7:2f:b6:a2:
fc:5d:21:da:66:a0:fa:cc:17:24:ac:a2:40:14:13:68:1d:40:
41:5a:cf:38:8e:ac:6e:de:bd:12:9a:b7:cf:21:76:34:8f:c9:
0d:11:99:b6:c5:90:18:08:06:9d:6c:c5:bb:91:68:fc:d2:d1:
36:c6:5a:7e:40:cb:91:d5:a4:d6:1f:da:d7:1c:5b:9f:37:bc:
17:a7:d0:3f:36:b0:b1:6b:8e:df:cc:a9:a6:98:e3:af:9a:75:
7a:61:4d:17:15:4e:28:d4:b8:c3:d1:f1:b4:83:68:0f:98:31:
fc:33:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:26:20 2024 by rpki-client on console-ams.rpki-client.org