Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.cer (raw, json)
Hash identifier: ptiYHFWm4DhUb8ElGWnFO+bnTCMyk1yjOtIFirW2r1Q=
Subject key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4EF8E0DEA6D773C5B29A62F71E84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56701
IP: 45.157.212.0/22
IP: 2a0f:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4e:f8:e0:de:a6:d7:73:c5:b2:9a:62:f7:1e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a3:7b:00:8b:ae:0e:1c:2c:c7:59:a4:04:
f4:4c:2f:50:ac:65:e3:be:26:20:86:05:e2:e9:52:
62:6b:73:0b:a6:e6:2a:5e:e0:88:27:f2:1d:45:8c:
6d:f6:f4:47:ae:25:58:9d:dc:55:e3:0a:33:05:65:
43:62:27:70:88:38:25:60:b1:4b:ef:8e:30:cc:86:
a9:5f:4e:98:e7:2e:44:d5:d2:71:8a:35:ae:d2:f4:
d7:1c:e1:02:81:3d:ea:e8:de:4a:fd:5b:e8:ba:6c:
18:63:1b:a7:a3:0a:49:cd:44:db:ef:36:a5:4d:36:
cf:10:be:e8:76:73:20:b2:a8:67:ac:cb:52:ac:43:
51:7c:f4:03:9d:22:4f:e1:67:3f:88:65:cc:41:69:
64:cc:a1:98:df:60:d6:47:b0:7b:41:c8:78:44:ad:
0f:78:18:ee:ec:bf:2f:23:3d:11:92:67:ec:2b:27:
a9:07:51:e4:75:ce:3f:a4:62:63:4d:7c:a1:58:2c:
8d:9e:f4:dc:0b:8f:36:7e:f1:6b:40:40:dc:34:93:
f5:34:fb:e8:2e:43:ea:09:e1:47:07:d6:fa:b3:b1:
a2:5b:fc:73:86:4b:54:28:d8:4b:a7:ce:13:73:57:
bb:e6:6d:5a:90:d5:54:0b:98:4c:c0:8a:9a:c5:56:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
IPv6:
2a0f:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56701
Signature Algorithm: sha256WithRSAEncryption
78:f9:1c:60:6c:c8:21:d6:19:9b:9a:19:c0:86:8e:18:84:0a:
d1:43:8d:bf:60:8c:4c:d7:93:ba:a2:e1:a8:24:f3:07:1f:18:
65:b7:70:15:51:02:5f:7c:90:ea:e4:3d:d4:a4:a8:34:d9:5a:
88:77:44:b4:bb:31:b2:a9:ef:6e:31:ed:a7:ab:a7:f4:7c:96:
6e:85:fb:e1:8a:32:09:5d:b4:1b:03:7f:b3:19:80:f2:51:c7:
f8:3e:9c:37:56:9b:c5:ea:2b:54:34:f3:5e:e2:51:99:a1:be:
bd:a8:87:39:a1:98:21:f0:10:55:65:6b:e1:df:d4:4c:fc:4c:
2f:ef:80:03:d0:e3:fe:2b:e8:87:9e:76:fe:40:e7:c7:e5:99:
ad:86:3f:58:f3:5d:33:74:5e:87:39:70:1f:8f:8e:2b:9f:af:
15:e9:02:90:6e:e4:bc:89:28:65:6f:0a:26:e7:6d:6c:ae:54:
7f:17:5f:c8:7b:c7:7f:f5:41:75:92:4f:42:ca:08:a8:26:db:
ff:6c:84:58:1a:11:d8:2d:06:75:0a:1b:94:ec:1c:c7:89:e4:
a1:98:b4:7e:e8:00:2f:d9:73:6f:25:e7:ce:df:7d:cb:7d:90:
13:ce:f6:79:88:c4:80:62:51:84:44:9c:05:ee:bd:4c:fd:31:
48:33:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:55:16 2024 by rpki-client on console-fra.rpki-client.org