Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.cer (raw, json)
Hash identifier: lpixNopdwsof0cTTjmSfbOJ0Y9t7Rldc8wctnOnON3o=
Subject key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015AC565D11164E06272C3DFD0DBFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.132.32.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5a:c5:65:d1:11:64:e0:62:72:c3:df:d0:db:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:8e:e1:5b:55:b8:12:95:97:c9:6f:a3:87:
48:1c:33:ff:c0:4c:36:84:f3:9d:b7:ae:e1:8a:2d:
5d:98:4c:ba:61:cb:ec:9c:52:ab:38:d5:5a:9a:94:
c4:7c:63:f8:e6:78:25:56:a2:cb:1e:97:7d:b7:8d:
34:00:07:03:dd:99:66:86:e3:fc:11:76:40:78:c4:
b9:a0:d2:99:99:ab:33:11:79:e0:f2:08:40:ff:15:
17:59:6c:7d:fb:96:b7:24:b9:3e:6f:a7:3d:09:03:
00:07:a4:48:05:b5:71:fc:bf:30:1d:ab:fc:e9:a3:
6c:87:1b:f2:55:ee:e6:9b:18:5a:77:06:e9:b3:7b:
8f:ec:81:4f:e8:03:9f:15:3e:e6:a6:4a:01:58:a0:
e2:e3:87:f0:75:6a:98:d8:45:9a:d8:2a:c5:61:bf:
d7:4b:8d:a1:44:ee:84:09:d9:44:dc:eb:12:54:2d:
e4:c5:69:5e:5f:a1:a1:58:5a:2f:e1:fb:ca:92:98:
2c:9c:48:9b:38:b8:d1:3d:63:f6:06:cf:16:53:32:
7a:52:a5:da:fa:2d:2b:0a:08:b2:53:54:8a:0e:b3:
e1:48:8e:f0:95:56:2d:1c:81:b1:9c:85:b5:9e:df:
59:cd:a8:2d:fa:8f:c3:39:d8:ba:7c:3f:ab:6d:59:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.32.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bf:29:ca:86:fa:27:2d:ee:62:a1:73:7e:84:05:ee:39:fb:
5a:46:89:69:24:31:7d:e4:0c:6a:8f:80:64:a4:87:2d:a5:dc:
5a:21:41:75:82:73:f4:e0:fe:1d:60:b8:77:77:f9:3d:55:a8:
06:59:13:42:a1:8d:7e:b1:9b:85:57:ef:6f:37:99:a0:ce:62:
0a:af:01:1b:de:70:af:d6:9a:f4:1c:49:27:a0:49:0b:ed:cc:
2a:61:ac:3a:15:b5:a4:9f:20:ad:12:f9:90:d4:ff:06:d3:19:
dd:e2:2f:ac:8f:00:aa:95:16:4c:3d:52:a4:34:7d:24:03:06:
9b:db:15:ed:04:33:55:fd:c5:6b:6f:b6:a5:be:0e:7b:dc:c0:
6f:b3:67:17:90:59:60:dc:4b:29:8d:4e:43:e5:8a:a9:0e:3e:
ce:f3:67:6b:64:12:a5:d8:0e:e4:c1:c7:2d:51:06:bf:e3:c8:
22:d2:41:1f:5b:c3:0d:7b:24:b1:9a:47:a0:34:0a:57:4b:5f:
9c:37:ba:dd:83:af:f2:e6:b2:b3:38:b6:b3:8e:88:6f:27:fa:
24:76:20:6b:7a:ad:40:2a:aa:93:4e:15:75:9f:a4:5e:7b:a5:
b4:6d:05:45:67:e7:ca:ce:da:66:aa:b2:5c:78:00:ac:c7:8e:
9c:18:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 21:27:46 2024 by rpki-client on console-ams.rpki-client.org