Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer (raw, json)
Hash identifier: Wr0dIV3OPvl2/rTv0IMsOwpBTF1bt9OXIZTrdIJugzc=
Subject key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D60B076A7BAC3999856C9CFBC61BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42744
IP: 194.110.151.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:60:b0:76:a7:ba:c3:99:98:56:c9:cf:bc:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:89:74:d0:46:69:c1:7c:34:d8:1e:fd:e5:
b9:94:fc:1b:ba:15:08:aa:58:f9:30:f9:04:3f:34:
68:08:29:eb:67:d0:96:0a:dc:a1:20:ad:a1:e8:79:
b4:c0:18:4d:26:ca:b9:21:bf:78:75:18:0e:d7:8f:
27:25:3b:9f:b8:c4:f7:65:25:46:75:bb:b8:20:66:
d5:1a:df:f8:4b:af:d2:39:cd:0c:e0:5f:2b:c0:ea:
e0:66:38:fb:00:d0:6a:83:35:5a:2c:35:22:1d:dd:
38:ca:e5:b5:e2:0b:c9:01:b1:f0:53:60:1f:44:bf:
01:ee:43:62:11:39:b4:9c:03:cd:0d:c3:86:a7:de:
e1:fd:77:8d:15:94:7e:01:46:c7:d1:47:57:17:1b:
e5:3f:0b:f9:69:45:77:ab:df:34:e9:ca:dd:50:d3:
d8:77:b4:94:13:f0:5f:95:3e:f5:1f:cd:09:c9:cb:
fd:ff:55:ce:ca:0c:bb:f1:41:29:8e:08:92:bd:d1:
59:b2:2c:27:6a:ab:ad:27:0c:e0:2e:58:d0:b5:08:
b6:e6:9b:d7:de:62:3b:0e:ae:c2:28:aa:35:fd:2a:
25:2a:6a:34:1b:a2:5e:0f:78:b9:11:f6:71:5b:d0:
e5:d1:70:f3:65:45:c0:66:17:52:54:33:21:8d:ad:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.151.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42744
Signature Algorithm: sha256WithRSAEncryption
73:ad:08:76:fd:af:86:4f:af:6a:2d:31:a6:98:2b:fa:65:ee:
43:0d:1e:45:41:11:d9:1c:ab:25:6b:04:be:2b:87:09:b8:da:
de:e4:22:f3:47:c4:11:a6:0e:5a:48:ca:f2:95:d2:7a:6f:f6:
d7:fe:2f:de:5d:d3:1c:b2:0f:b8:ea:55:cd:56:7e:f3:c7:e9:
f2:3e:66:0a:c1:e1:58:7c:0d:18:e5:17:dd:70:35:5d:a0:9c:
72:de:dc:e7:ef:21:09:98:00:d2:ee:36:3d:77:b7:9b:8b:7e:
3b:c4:93:09:8a:2d:29:4f:a9:5c:5d:7c:ee:18:44:5b:1c:11:
bd:30:a5:f1:0f:8c:45:21:75:42:37:58:e7:7b:36:4f:2b:c6:
92:ff:4f:20:32:30:a6:2d:74:48:66:b6:89:fc:78:df:ab:b5:
87:a3:39:82:b4:5c:0b:63:62:de:13:3a:15:cf:4e:bb:23:0a:
2e:dd:8d:12:6f:01:3b:c5:22:fd:60:1e:3a:50:04:ab:92:76:
82:64:77:4d:06:c5:25:71:ca:19:fd:24:fd:0c:f5:2c:8b:d6:
80:57:56:51:d0:65:68:76:3f:e1:94:89:5d:41:5a:70:c8:25:
28:63:ba:1f:29:ef:2e:b1:69:47:7f:ad:e8:dd:ad:57:ae:69:
33:6f:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:45 2024 by rpki-client on console-fra.rpki-client.org