Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
File: CLFH055Du3X596_0XnvyuDUw-HQ.cer (raw, json)
Hash identifier: AGZWcDF9LuevDzivcwZcgQ5a4Mixud14uwlu3feRyc4=
Subject key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191BD1191C5471BF4DB8DF06DC8C7376F4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Sep 2024 12:45:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25526
IP: 109.197.216.0/21
IP: 193.254.220.0/23
IP: 195.39.242.0/23
IP: 2001:678:b44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:11:91:c5:47:1b:f4:db:8d:f0:6d:c8:c7:37:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 12:45:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:da:84:28:55:75:d2:df:84:6c:dd:2b:03:
ce:ca:64:3e:89:4b:3b:62:6f:83:a9:64:fa:7b:7d:
56:ae:0d:3a:d7:b2:d6:cb:99:31:7d:a7:cc:b0:b1:
ab:85:5b:0c:65:9a:ca:0e:81:fd:05:5d:9d:48:e9:
25:75:de:8a:da:d7:7f:73:4e:59:61:6b:e5:e0:18:
6a:fc:c9:8d:9c:10:a3:47:24:b4:83:8e:e6:af:8a:
37:f3:bf:53:fc:c7:ca:88:6d:62:d7:c8:3c:16:a3:
8a:c7:70:a8:9c:ca:f2:66:84:8f:40:56:fe:41:16:
66:a0:32:3a:0c:cd:35:27:6c:6e:24:53:26:05:21:
b2:f3:5f:62:ec:f9:05:4c:4c:fb:4f:25:0f:b0:52:
eb:2d:9f:2b:30:f6:e6:36:05:49:9f:d6:bb:25:79:
8f:65:95:68:2d:79:28:e5:0a:75:6e:28:ca:b1:58:
85:c6:39:64:a8:9a:36:0a:e9:a5:34:1e:c2:19:98:
11:9e:f3:03:04:06:c6:60:7b:57:1a:33:81:91:0d:
94:bc:98:39:da:3d:f7:19:29:98:7c:2b:d2:ee:6f:
2c:16:d1:15:f2:4e:a2:96:0e:25:55:70:ab:47:40:
55:21:53:e9:29:f0:03:72:6e:02:a6:13:44:71:dc:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.216.0/21
193.254.220.0/23
195.39.242.0/23
IPv6:
2001:678:b44::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25526
Signature Algorithm: sha256WithRSAEncryption
71:21:fc:1c:0c:99:0a:c1:e3:e8:31:d0:1b:88:6e:dd:bf:b3:
1b:0b:7b:64:b6:9f:b0:42:b6:1c:c9:6f:2f:91:f7:77:98:d0:
3f:dc:27:d0:d0:cd:53:2a:f3:ea:77:d3:af:b3:9a:ad:30:73:
1a:dd:d6:44:33:b7:2d:4d:5d:1d:44:36:39:44:6c:2e:11:69:
76:cb:e0:ab:8c:b4:ec:d6:46:22:33:6b:2b:e3:c3:98:88:f5:
50:6f:d4:09:ee:b7:93:aa:d0:4e:24:ef:57:75:00:12:31:74:
bf:93:d7:5c:9d:6e:f4:c7:1e:c3:90:57:b7:32:e5:cd:fe:20:
95:c4:f0:4d:e8:b0:fa:82:18:eb:be:08:fe:95:20:fc:6a:23:
99:91:f6:7b:4c:9a:dc:02:ca:54:83:7b:04:75:3e:b7:be:62:
31:7e:18:dc:e8:9d:42:6f:cb:35:0c:f6:99:74:ba:de:06:0a:
bc:4f:35:7f:33:c9:b9:72:6d:b9:a1:d9:04:82:d4:e2:a2:a7:
75:fe:fb:63:fa:09:60:3e:d8:49:68:43:77:96:1c:7a:b8:79:
dd:40:41:ce:e1:79:80:04:19:58:29:a8:27:8c:8f:b3:4d:5b:
5a:05:09:8b:79:98:c5:ef:3f:0b:b6:2f:bb:8f:7c:2b:7e:08:
15:ef:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:02:13 2024 by rpki-client on console-fra.rpki-client.org