Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer (raw, json)
Hash identifier: /kVyte3blMgKFAbdr0ZZnNYiIQi/ij5KZw2svdW9qj8=
Subject key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72722DD557975811F175F7E93922506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39364
IP: 185.225.80.0/22
IP: 2a0c:d080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:22:dd:55:79:75:81:1f:17:5f:7e:93:92:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:01:ab:ab:cf:c6:8b:f0:7b:37:ff:38:8a:
98:8c:cd:98:32:e2:82:66:ea:c7:d4:74:23:37:9c:
77:d0:37:81:d4:d7:6a:b2:50:f2:bb:fd:12:ec:d0:
f4:2c:93:65:f4:75:e3:09:1f:1f:22:0f:d3:47:f8:
c7:22:47:62:be:e2:e3:05:af:32:a6:53:16:c8:6e:
93:0c:f4:4e:1c:59:a6:66:15:fe:39:0f:3a:85:39:
b1:3f:2a:c2:f3:26:c1:a0:bb:88:f8:82:14:71:84:
09:6e:8e:3c:ba:d9:b2:c9:c3:e2:ac:4d:16:30:3b:
b0:63:83:ab:2b:a4:72:1c:d9:53:80:75:f2:7f:a6:
37:2c:9f:7b:3f:96:b9:77:5a:ff:96:80:8d:0f:82:
86:cb:a7:8b:11:72:f8:e9:58:c0:b8:28:4b:d5:c6:
1d:2d:c5:66:ed:53:19:71:c1:fd:07:45:71:2e:9b:
e3:46:40:f4:f7:fa:c6:db:9c:ea:ad:f4:57:88:28:
e5:02:5f:7d:c5:6f:77:7b:05:1c:c2:1e:18:a6:23:
49:fc:af:87:75:82:7d:a0:34:3b:b2:2e:9e:7b:6b:
3d:5b:87:93:bd:ca:ce:8a:92:4a:58:78:9a:97:0e:
a2:f8:30:9d:02:76:ce:ea:7e:32:58:bc:08:08:9a:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.80.0/22
IPv6:
2a0c:d080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39364
Signature Algorithm: sha256WithRSAEncryption
6a:43:a8:d8:40:c1:61:8e:11:f2:db:57:6c:95:d3:c7:36:9e:
0b:aa:41:50:79:2b:5e:42:2c:80:2f:dc:0a:9f:3f:b1:3a:db:
61:a7:aa:4f:61:c4:5c:6e:5c:62:6d:fa:74:df:c8:3f:17:09:
c1:0e:31:59:f8:85:87:f3:74:6c:12:1f:8b:d4:1b:47:28:7a:
2e:bd:04:74:45:44:ed:66:3e:c2:a7:a9:6d:cb:c5:d9:b4:09:
59:5d:cc:64:42:04:90:6b:35:9d:04:ff:89:f2:f7:d7:b7:67:
46:87:0c:a9:f5:cf:c6:75:e9:a0:46:02:8a:53:0a:bd:26:90:
52:fa:e3:89:fc:de:2d:65:ca:48:19:22:c9:47:a1:a0:7e:ea:
83:0a:d9:90:3a:64:52:9b:68:12:31:77:2b:78:71:1b:2e:8c:
45:cb:fe:3c:5f:6e:3f:10:dc:43:17:9b:b4:88:24:3b:38:1b:
11:1c:04:d9:20:d1:e5:76:2e:80:82:a3:32:96:a4:b4:77:ac:
41:c9:a3:1f:4d:a9:40:76:f6:79:b0:fb:64:a2:6d:ef:ac:ab:
39:85:65:40:4f:f4:2c:d8:d8:19:89:2f:e0:e4:41:0d:b8:cc:
cc:c0:8c:8f:cc:3d:b5:34:40:c6:55:12:a0:b8:7a:c1:ec:dc:
99:fe:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:58:19 2024 by rpki-client on console-ams.rpki-client.org