Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer (raw, json)
Hash identifier: EV4E/ANDEflZkkXxw2QicaHgEr+esUMzaGrXu342k54=
Subject key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F6245B1E716427736421FA4882E2F327F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 May 2024 11:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20956
IP: 193.238.174.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:45:b1:e7:16:42:77:36:42:1f:a4:88:2e:2f:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 11:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:1a:79:2c:11:54:11:4a:db:9b:4d:fa:01:
39:38:c6:79:f0:71:69:f5:6e:ba:0b:71:c1:c2:7f:
7f:05:78:83:04:97:ee:83:ad:b6:64:a8:d1:38:b5:
90:08:b0:aa:76:33:39:e3:4f:fe:13:30:46:fe:46:
da:e1:7a:b5:d9:81:2e:21:7a:ef:75:63:24:0d:bb:
e9:9a:d0:48:15:8b:89:8c:c3:95:3a:c9:47:47:da:
55:2c:09:52:8f:db:a5:3a:87:07:e3:8c:96:14:38:
ed:31:23:ce:d6:e9:dc:d1:d1:b5:70:85:dc:ee:d1:
7b:ea:2d:8d:50:b0:db:75:f2:65:7c:e1:0d:da:04:
9a:22:05:9f:e1:29:fe:2b:a9:9c:b9:b5:c0:04:d1:
2f:42:03:8d:ce:fa:c3:4f:56:ba:6d:7c:42:df:6c:
aa:f8:5c:41:60:45:31:54:c2:f6:5b:72:a3:b9:b4:
d7:2f:93:2f:a1:ea:6c:fa:79:95:f3:5f:b6:b6:f6:
54:e9:df:45:08:7b:c9:b2:98:f5:66:29:52:ad:0d:
30:a1:16:6f:42:8b:fa:2d:54:21:6e:6f:74:c3:57:
74:87:c2:75:64:94:2b:b8:91:4f:45:33:04:ac:78:
5e:d3:cb:b4:02:97:d9:15:75:42:e1:43:5d:00:00:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.174.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20956
Signature Algorithm: sha256WithRSAEncryption
76:66:af:b1:71:78:96:ba:84:78:9f:a2:b1:99:ea:2f:6f:55:
c6:c9:fb:9c:e9:a9:ff:ee:ea:f6:83:51:36:93:29:83:84:83:
79:86:6e:a9:c0:71:77:61:72:67:bc:6e:90:1a:9a:dd:7a:a8:
59:45:41:c8:7c:54:9a:ea:79:f1:57:ae:b3:b9:a4:5a:30:73:
17:dd:9c:fa:78:26:34:66:5f:5e:d5:f3:47:b8:ff:d2:2f:25:
1f:08:a4:d0:13:02:46:46:be:10:fb:ef:4a:58:59:37:e8:e8:
4d:2b:c0:85:67:c3:c0:3e:25:01:0b:18:07:72:98:bd:9c:24:
d8:7d:89:ea:41:92:e6:bc:76:fa:06:33:f4:5a:83:09:da:dd:
83:2b:f9:39:9d:a0:e1:29:82:f9:04:0a:df:4e:f6:ed:1b:79:
e5:91:1a:97:42:71:06:ad:b4:5c:4e:28:91:b6:b9:75:89:e3:
08:84:df:0e:55:5b:a2:f1:f1:f5:e1:ac:90:a1:f4:e4:03:28:
57:aa:df:82:38:d9:4c:2e:4f:3b:7e:95:00:3f:2a:39:fb:f7:
10:29:8c:6b:cc:09:d2:bc:6a:4e:6a:5c:64:92:81:22:87:06:
f5:12:c3:5b:2c:fd:ea:05:42:87:ec:70:32:9b:82:e2:b4:8e:
43:00:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:53:47 2024 by rpki-client on console-fra.rpki-client.org