Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer (raw, json)
Hash identifier: b1F2ORtvgc3zYtJNXNZaJtsRVwj0xQzU5XbU6mJ4Ync=
Subject key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254FDFFB5EE06332B46DAB4496B9B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203322
IP: 185.138.172.0/22
IP: 2a07:fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:df:fb:5e:e0:63:32:b4:6d:ab:44:96:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:15:c2:af:10:c6:2d:d8:1c:25:a3:e1:b6:
1b:48:99:9e:d1:cf:f4:8b:45:3d:85:8b:d1:8e:36:
21:1c:80:4b:89:bb:90:1d:43:1f:8b:f1:36:09:0c:
97:5c:d2:f7:4e:b0:fe:21:00:1e:a4:d5:b2:b7:1f:
7e:c8:99:2a:cf:99:e7:c4:29:60:19:97:a7:7c:10:
e0:70:56:19:2e:5d:d6:53:d9:b4:09:ac:ca:f1:c6:
54:89:40:db:7a:5b:ee:51:3d:29:fb:c7:3d:20:83:
f7:6e:0d:f0:a3:4e:23:bf:b2:e2:6a:03:59:1b:da:
63:81:9e:1e:be:2a:87:4a:93:20:6a:c7:42:aa:ce:
22:df:2c:0f:25:e4:32:f0:c3:9e:56:e9:2f:b9:cd:
98:86:cb:1e:2e:6c:29:a0:af:7a:55:29:4a:5c:d5:
28:6e:79:8b:da:e1:c7:4d:94:94:4a:c6:26:20:46:
99:ec:2e:ac:37:a3:36:c8:7d:01:73:36:78:2b:a2:
48:0f:3a:e6:7c:ef:5c:2e:02:29:0b:a2:36:29:f5:
a5:d4:ae:77:c6:aa:a2:1a:b1:b1:85:9b:01:34:e0:
42:88:78:0e:f4:80:ef:64:57:e3:00:ae:53:a9:5c:
1b:ba:f1:d5:f8:8a:3b:d9:11:87:a2:c6:e8:03:db:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.172.0/22
IPv6:
2a07:fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203322
Signature Algorithm: sha256WithRSAEncryption
8b:9a:b1:51:ec:c3:75:74:10:e6:67:55:0e:b5:e9:92:e3:a3:
ad:71:eb:8f:89:ce:f2:e8:1d:54:cb:bd:db:40:fb:78:43:b3:
62:bb:4b:35:11:3a:f2:4e:b4:22:e2:07:2d:32:12:23:45:42:
94:a2:bc:3e:11:cb:71:aa:39:53:56:e4:35:09:0a:fd:cf:5e:
bd:64:19:3f:ea:4a:2e:59:22:11:0c:97:39:e9:c8:e1:4c:89:
64:d8:30:48:49:f2:bb:89:50:ef:45:b3:19:6f:7f:7d:f4:e4:
d0:8d:61:2f:5d:2d:4d:c3:7e:f5:6b:31:03:97:b0:cd:9d:00:
2c:f9:8a:a2:8f:29:0e:1f:f5:a8:9c:ad:51:9a:54:2d:9d:0c:
08:f1:68:1e:ba:95:4d:86:bb:c9:e2:b4:8c:f6:31:69:fa:4d:
44:d6:39:cf:9f:c8:23:5b:71:84:b5:10:bd:1d:00:14:c1:80:
27:65:4a:96:dd:72:09:00:7b:87:7c:12:5d:e9:71:75:0f:cb:
fe:b4:4c:c7:e5:38:17:2b:cc:47:92:a2:43:fa:c1:65:75:8f:
b6:b1:42:7b:7b:cb:72:c2:af:97:01:1b:87:d8:b7:f5:0c:4b:
22:8c:f2:f3:87:9b:7b:b4:d6:62:06:83:13:ed:e5:5c:a6:8f:
58:d8:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:40:24 2024 by rpki-client on console-ams.rpki-client.org