Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer (raw, json)
Hash identifier: uZqxoGCIfbXsYDrA6rL8B+drofeuuFNWaqpyHywrhlE=
Subject key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4930404DB4A79FA8402BA93586A3C24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44704
IP: 195.42.96.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:04:04:db:4a:79:fa:84:02:ba:93:58:6a:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:a2:11:ec:e1:f7:86:66:1c:52:ba:a8:f5:
35:09:00:f9:c6:34:b0:7c:31:c6:0b:f9:d8:ed:0d:
8d:21:57:9c:6c:15:f3:71:d8:97:8b:85:ad:4b:f8:
91:48:45:59:fc:1e:9c:81:d6:fa:e5:d2:81:63:f1:
f6:44:6f:26:20:ba:19:d4:c9:c5:f0:9e:d2:a1:cb:
72:05:7d:b6:d1:14:51:34:8e:88:4e:54:69:d2:1a:
78:30:45:86:09:29:27:0a:a9:11:3d:45:91:c1:64:
e5:b4:8b:3d:fe:89:fc:e3:dd:14:a1:a5:ef:3b:31:
c3:bf:2f:6c:d5:50:a9:90:9f:2a:a7:cd:e1:c7:37:
e5:6a:5c:43:a5:d4:15:ec:c7:39:b0:da:e7:8d:86:
0e:31:6b:22:88:3a:76:cf:92:e5:d8:9c:18:89:8f:
58:2f:38:5f:c9:d8:46:9d:78:dd:fe:1b:9c:88:32:
d6:11:87:dd:64:84:b6:f6:94:4f:9f:23:0b:84:25:
dc:27:38:fc:41:52:9d:a3:2a:da:68:c1:64:4b:90:
0a:db:74:8e:8b:0f:43:27:f8:af:8d:3a:1c:a7:08:
8c:ad:13:03:16:a1:95:20:72:c1:b5:11:e5:d8:26:
98:09:31:81:9c:8a:d2:7a:72:b1:e5:3c:8d:47:f6:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.96.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44704
Signature Algorithm: sha256WithRSAEncryption
49:ff:0a:8f:2d:35:55:b4:95:75:1d:de:88:77:fa:b8:0f:f7:
03:34:7b:ad:04:d1:32:15:8a:7e:88:72:b0:2a:98:b1:3e:9c:
82:9c:b9:37:86:4f:23:30:ba:a1:95:b8:2f:4c:37:27:00:d1:
3d:87:67:24:c2:52:4e:67:ae:d9:07:1b:ba:b7:b9:d3:f2:c4:
42:fa:da:44:e2:9f:93:a4:9a:f1:75:2e:1b:4e:e3:7c:30:fe:
4c:a2:63:45:3c:30:d7:e0:5b:99:9b:a0:d3:c0:8e:a4:06:1b:
8b:52:6e:bd:ff:ac:12:cf:b7:21:6a:57:b5:0c:a1:0f:4f:4c:
a7:f9:96:bc:36:5d:61:d0:fd:d8:74:c2:68:89:a1:f2:69:c2:
82:96:4b:a5:23:21:2f:b7:d6:f9:57:0b:12:9e:c9:68:ee:22:
7f:81:f5:31:42:ca:64:c9:c4:54:1d:7a:45:15:30:c5:98:5c:
c1:5b:e0:20:44:5b:18:d1:e1:0e:26:3b:8f:47:c8:3c:91:7e:
9a:86:ed:6e:c1:aa:46:c6:0d:0c:f1:a6:e1:72:9c:c9:a1:33:
aa:5d:c6:7c:c2:ae:92:d5:0f:50:9d:30:94:24:18:12:bb:1d:
b5:83:a1:22:a9:32:d4:97:4c:fe:f8:99:0e:71:fe:46:a8:c4:
78:0e:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:22:29 2024 by rpki-client on console-fra.rpki-client.org