Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer (raw, json)
Hash identifier: RAX58NFuaZetjuPLsCNXKZIjFFc438ZXd8NzO93dUAw=
Subject key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9917CAE7E99662EC2D1FA68B2B84B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57951
IP: 37.188.88.0/21
IP: 2a00:c340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:17:ca:e7:e9:96:62:ec:2d:1f:a6:8b:2b:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:6a:fd:2f:ca:f3:85:fb:14:c9:94:1b:4c:
4e:16:31:54:54:71:07:2e:2e:9a:ba:f5:1a:2f:8a:
1a:bd:03:cb:37:d1:a6:53:07:4f:af:61:33:32:7a:
de:9a:8b:c3:92:5a:81:e2:63:f9:11:e7:79:34:89:
08:b2:5c:5e:e6:09:45:c2:6c:fa:b6:0b:45:58:a0:
13:c7:4d:bd:09:62:dd:5b:53:b1:6e:0a:d4:68:96:
47:de:14:a4:23:df:2a:81:44:6e:54:6c:9b:8c:46:
80:70:5a:af:36:4d:f3:95:da:6a:b4:ba:3d:76:fa:
2d:cb:c6:18:92:90:91:1c:27:e7:94:c0:f8:29:fe:
1a:66:41:10:ef:d5:7e:20:45:cc:a3:a9:04:e0:02:
6f:f8:c7:50:02:1e:77:45:38:74:ef:cb:85:2f:3b:
34:e4:61:ae:3e:7e:a6:9e:85:7a:be:5e:16:ae:ca:
e6:3c:d9:53:f0:72:f2:50:41:be:b4:85:f3:c5:37:
d0:c5:42:7c:ab:a3:86:6d:6d:c8:01:fa:46:ad:4e:
c5:6d:4c:6e:99:a7:d8:01:b7:09:fc:6f:39:1e:ff:
ac:bd:cb:59:62:f5:37:a3:a3:88:d3:f0:2f:3b:9a:
b7:43:14:bb:05:80:25:b7:88:5d:b3:55:69:fa:8b:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.88.0/21
IPv6:
2a00:c340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57951
Signature Algorithm: sha256WithRSAEncryption
93:87:8a:7d:55:5c:d5:b8:c6:6c:07:68:18:7d:e7:cf:2e:b5:
ef:1e:0d:29:bf:a5:6c:6f:d7:6e:a4:18:68:e5:cb:80:fd:a0:
30:8a:94:85:eb:50:0f:78:49:b3:1b:0b:57:bb:8e:28:0f:ff:
ae:0d:56:b2:9a:37:77:db:70:92:a5:7c:db:e4:85:1e:fd:1c:
49:44:da:0c:24:f5:67:c9:58:5f:68:c5:66:5a:f7:09:8d:db:
64:f0:e4:f0:14:11:f7:72:5c:06:6a:61:b5:53:be:68:47:cf:
99:7a:25:23:96:94:4c:d1:5a:32:5f:1b:f6:de:96:36:fb:5e:
9c:81:69:2f:2d:55:85:96:cb:fe:21:16:1e:44:3d:99:00:9d:
24:5b:e7:67:d3:d0:30:08:d8:b2:25:85:4a:19:e5:1b:58:fd:
a4:d3:6d:01:af:cd:c4:26:c1:42:40:27:9d:7d:56:a3:1f:b8:
2f:eb:a8:b7:eb:5e:86:da:c1:6e:0f:3a:a4:fc:79:42:c4:b2:
36:e3:c4:74:a1:3c:bb:9a:85:40:f8:cd:05:cd:83:e7:2b:f4:
8a:c3:7d:e1:84:45:ed:1a:d1:4f:c7:50:a0:58:26:ad:33:5a:
ec:25:14:45:cc:a7:2d:1e:d3:7e:e5:14:be:7c:38:c4:22:00:
73:5e:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:30:41 2024 by rpki-client on console-fra.rpki-client.org