Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
File: 8HHkN5gsw0b26BfKZIknI-21QZo.cer (raw, json)
Hash identifier: b7+LpxoxKjap9u3F7HwBeBXEAI1Y4nzWqsU2NxONtwA=
Subject key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EB61DCC0E03CC7810589354BCC97D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49475
IP: 185.246.156.0/22
IP: 2a0d:8780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b6:1d:cc:0e:03:cc:78:10:58:93:54:bc:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f071e437982cc346f6e817ca64892723edb5419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:87:dc:4c:72:f0:bd:b6:7f:05:07:07:be:09:
d2:b8:3f:dc:ef:be:26:90:57:d5:a2:f5:9a:21:f6:
a4:64:7e:da:67:1a:63:77:48:72:8e:27:b8:37:b0:
0d:66:0b:9c:29:47:93:7a:55:70:2c:b2:53:57:a1:
03:28:e8:2c:66:0a:60:03:df:66:93:d7:7b:d4:9f:
d6:ac:8d:08:a5:c1:40:45:6c:91:18:86:2b:27:8b:
e3:45:ac:de:a2:b5:3f:d9:5c:8d:12:2e:d2:1f:de:
f5:fe:83:49:1a:77:07:b2:8d:3f:27:c1:2a:07:33:
ff:ab:79:fe:5a:38:be:4f:44:f4:e7:6c:60:19:f2:
37:9a:f5:cf:18:bb:02:83:2c:76:87:9f:6b:a6:11:
f2:c3:47:78:2c:e2:3f:ed:65:74:cd:a4:fd:e8:24:
1c:fd:8f:c2:5f:bf:91:a5:d0:9c:b4:0f:19:b6:58:
b7:b5:8a:b8:8d:e0:15:39:a7:84:37:d1:9c:18:cc:
44:da:f9:d1:b9:73:e9:2e:ef:98:13:f2:9a:e7:4f:
d0:16:b9:16:09:13:be:02:2a:46:62:ef:1a:f8:d2:
53:7c:e9:22:e0:a7:27:0a:b9:4d:08:55:bb:d8:c6:
3e:d3:99:2a:e2:2e:75:bb:45:01:0b:a7:53:4f:9e:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.156.0/22
IPv6:
2a0d:8780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49475
Signature Algorithm: sha256WithRSAEncryption
09:cf:b8:92:96:22:c8:18:6e:1d:62:ac:1d:15:6b:a9:e8:98:
76:d9:7f:f1:57:98:15:07:8c:ac:5e:c2:21:ba:29:00:9c:c2:
cc:b4:13:ec:94:67:b8:54:59:07:c6:1e:f8:9e:12:c2:3c:fc:
fe:50:02:35:b8:26:68:3c:58:be:53:24:e6:27:49:6e:df:c7:
c6:08:f7:a3:fc:bb:5b:5d:3c:5c:d1:1c:78:7e:da:af:3e:a9:
5d:08:1c:68:22:69:e4:f3:df:da:f6:00:69:0d:67:c4:05:39:
a7:fc:d0:63:c3:76:f6:d9:51:7e:86:c5:64:36:52:b8:e7:ae:
7b:94:46:e5:9b:ee:b4:a4:e3:2d:8e:ec:de:e8:ee:dc:2f:7d:
f2:45:f5:f0:11:74:b5:fc:13:be:e3:52:89:d6:87:54:c9:29:
9b:a6:e4:b6:0a:83:bc:46:b3:c8:ec:6f:e9:27:c8:e8:16:db:
11:8a:5b:d0:40:b1:5d:7f:9a:aa:4c:bf:bf:11:68:75:f1:50:
92:04:d4:32:ce:63:17:3e:3d:40:2f:35:4a:b4:b0:25:d7:44:
ce:7b:6a:85:53:1a:d5:28:e8:98:d8:a8:58:8d:6e:e2:1f:f1:
c1:31:0b:99:3d:56:a1:ac:a9:f4:b2:a7:68:d3:a1:18:c5:e6:
f4:bf:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:54 2024 by rpki-client on console-ams.rpki-client.org