Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer (raw, json)
Hash identifier: Ad78c/dmQUzOa1xPU137TcZLIqFwtQKM3shnFzcxDCA=
Subject key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5012E648551EF94E548D3A8DF907CDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50583
IP: 46.30.184.0/22
IP: 46.33.160.0/19
IP: 185.173.124.0/22
IP: 195.191.172.0/23
IP: 212.114.0.0/20
IP: 2a03:1d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2e:64:85:51:ef:94:e5:48:d3:a8:df:90:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:bc:70:ec:59:36:48:9a:51:fe:bc:d3:f8:
08:d6:9d:46:67:9d:3a:92:a5:cc:3e:6f:1d:1f:fd:
79:03:1d:71:51:67:7c:b7:c0:de:41:0f:78:f9:fb:
04:c6:12:55:8a:3b:97:6e:06:41:f8:30:53:25:08:
a8:f3:58:f7:ff:f7:eb:09:79:b8:42:6e:f7:07:32:
19:3e:ed:71:90:e3:fa:4f:2a:97:f3:2e:c0:5d:59:
e5:68:c7:2d:f3:10:0e:f8:2f:3a:2e:24:26:52:e9:
ee:c8:75:50:31:c1:b8:9c:a9:6e:3b:ed:13:05:d1:
e3:07:c9:7d:fc:0d:b4:fa:9f:43:07:7c:db:d7:cb:
37:87:85:d9:ca:bc:a6:1a:04:61:ef:71:be:d1:d2:
ca:34:8c:98:c1:72:e6:77:f5:78:e2:62:75:41:19:
2d:8a:e9:4c:cd:43:51:59:89:73:4c:91:c4:3a:11:
0a:b2:68:e4:9f:30:24:d7:83:2f:f2:4d:96:09:5b:
99:1d:80:f0:79:1b:a3:74:69:80:40:05:87:b5:e9:
f3:db:f7:df:a2:e5:28:ab:5d:ff:8a:06:91:af:00:
27:22:c3:68:91:38:f7:72:d9:88:96:13:3a:39:07:
58:ff:9c:ad:4e:c3:2a:ad:b4:0f:d0:03:d9:2b:90:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
IPv6:
2a03:1d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50583
Signature Algorithm: sha256WithRSAEncryption
90:05:c4:b8:ed:ea:00:bd:16:64:49:43:ba:f9:50:ce:eb:6d:
4f:b4:50:00:a5:f3:08:bd:c5:35:d2:64:1a:c9:b7:49:72:e2:
55:06:f7:90:f8:15:62:08:3c:bd:c9:36:46:93:b3:2c:90:9d:
a4:8f:06:57:2f:ca:ff:a9:03:2c:5c:66:51:ed:00:52:86:19:
07:b9:3b:d5:1f:05:33:a1:78:36:aa:5a:ec:e8:5e:5f:bc:84:
c7:4c:8e:79:0c:09:26:51:bf:7d:18:03:6f:b4:e2:84:65:98:
41:63:6d:a1:4e:e9:cb:de:0e:93:b7:18:d3:71:1c:6b:d6:ae:
08:8c:d4:86:79:4f:34:ab:26:c9:8c:66:f8:78:08:54:6b:0f:
15:e3:8b:08:fd:5a:87:62:64:d6:81:96:86:7e:c3:40:23:96:
ba:c2:75:db:a0:5c:79:a9:8d:fa:e9:c8:f9:c3:87:f6:41:54:
d0:be:33:3a:16:a4:df:54:39:30:29:df:7a:8d:88:bd:22:b4:
5f:10:cd:6d:eb:19:56:56:8e:9b:76:18:10:16:13:9a:9f:c4:
69:1c:59:ec:85:e0:a5:92:61:e6:4e:72:51:e5:0b:41:33:b8:
93:f9:63:1e:10:12:cf:87:9a:31:3d:31:f5:56:1e:b2:00:3e:
db:59:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:17:46 2024 by rpki-client on console-ams.rpki-client.org