Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer (raw, json)
Hash identifier: okYXUBWCQ8nTpndjzXpqlXc7SRILDeHtMLTrM2S6Tb0=
Subject key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D5A6E58DFFF72FFFE6CC38BA1D81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209390
IP: 185.108.64.0/22
IP: 2a06:6280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5a:6e:58:df:ff:72:ff:fe:6c:c3:8b:a1:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:08:b7:9b:06:8a:08:ca:50:0c:b2:b3:27:
3c:6f:66:6a:9c:29:cb:a7:46:40:e7:1a:9f:4d:f0:
e7:81:66:92:89:57:b6:c7:5f:9d:43:75:df:28:ee:
73:2f:c7:11:2b:a0:28:cb:9d:56:93:89:cd:8c:b4:
a4:4f:f3:d5:63:4a:45:cb:42:f7:de:46:ec:4d:5d:
38:1a:5a:fb:ae:08:72:a4:6e:5c:24:db:48:46:28:
fc:a6:f5:2d:80:1f:8a:f8:67:38:07:15:43:06:8a:
e3:12:85:e7:ef:de:17:6d:a7:42:fa:a1:a8:e1:fb:
2e:76:10:59:78:4a:0d:bf:a8:8e:d0:6d:19:ca:54:
ad:ea:f6:9c:e6:69:a5:15:65:af:11:76:27:b6:97:
c8:b3:c5:20:6a:4b:20:9e:45:0d:6f:85:a5:01:26:
82:c6:65:3a:56:9d:39:74:e4:a4:03:0a:98:2a:88:
df:a6:4e:d5:59:12:c8:c1:8a:8f:89:94:a5:a3:ed:
60:50:64:95:63:ca:44:bf:b6:55:48:ed:a2:15:18:
7c:c6:64:e2:45:18:40:0c:8e:6f:f5:a5:a2:56:bb:
40:92:88:e3:92:5a:0d:30:38:14:ca:40:3c:9a:e2:
8a:40:11:fb:fc:2a:d4:db:97:79:82:c3:4d:a6:45:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209390
Signature Algorithm: sha256WithRSAEncryption
ab:0b:ad:d1:f3:a8:a1:f9:12:d8:d9:9d:5f:6e:b0:c8:ee:71:
34:0d:fc:7c:2c:b9:19:63:d0:e0:f9:a5:06:0c:a2:72:c6:e1:
27:47:12:cb:83:dc:ba:22:59:b6:de:09:3a:db:ba:f9:b2:69:
99:18:8f:e1:95:ca:23:5c:73:f0:66:0f:f3:9c:d0:b5:7a:e2:
0d:98:99:5c:6e:1c:04:c1:9d:14:00:e7:4c:f1:1a:77:6d:7e:
3c:11:d7:59:37:d4:99:2a:21:d1:a9:05:66:bc:1f:8b:de:14:
ec:cd:bb:69:00:70:c0:fc:27:8b:7a:fd:f7:e2:5f:bc:5d:80:
e6:2a:3e:b1:a2:4b:3e:f2:4c:f9:64:dc:bb:c7:4f:0c:0f:ef:
f1:51:0a:6c:37:e3:d7:b5:01:8d:c2:ed:6e:ca:d2:ae:7f:ad:
f0:80:73:53:4b:40:02:93:44:07:71:ec:c7:ce:2c:4e:6f:a5:
c2:b6:bf:4e:f0:3c:e7:88:5d:1f:db:bc:25:7e:da:09:23:7c:
9f:39:42:58:cb:e3:3c:82:ce:e2:ae:07:0d:ea:2b:2e:bd:14:
de:af:ee:dd:a2:17:2a:27:f2:35:57:9f:b9:99:7e:cb:49:62:
5b:f6:2e:6f:08:dc:95:32:75:81:64:76:11:e6:08:1b:03:7a:
9c:b9:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:56:20 2024 by rpki-client on console-ams.rpki-client.org