Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.cer (raw, json)
Hash identifier: d05k18NmOyELHheJwvb0PIpveJ9HNtP7Htd0Qxk/2xo=
Subject key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5006BC746C60E25C0FF0A94510FB950
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42068
IP: 195.242.150.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6b:c7:46:c6:0e:25:c0:ff:0a:94:51:0f:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:9d:cb:71:a6:20:2f:9f:57:7b:dc:a3:44:
f9:53:27:58:c4:c3:56:99:d2:98:64:b1:96:67:30:
6d:41:bd:82:e1:2b:73:fa:17:05:cd:13:46:d4:5d:
e9:a3:e7:aa:db:a7:f6:95:1a:60:2c:6b:fc:94:15:
80:24:b9:97:6f:3a:9b:d4:62:e9:ef:9c:71:a8:09:
e4:ae:71:6b:79:78:05:ce:45:24:68:17:a2:e0:18:
79:ef:15:42:2b:21:96:86:7d:1f:a2:68:02:b2:80:
bc:bb:a8:ad:d1:fc:ad:8b:c7:7b:5f:29:c2:d2:f6:
fc:36:34:e9:fb:da:bc:da:f8:d2:3b:57:a4:c0:6c:
4f:cf:ed:d2:24:09:38:b0:22:a9:89:7d:e2:7a:00:
f9:0c:a3:4b:29:36:97:5f:91:e0:d8:1d:64:66:ee:
a5:50:8a:55:2c:dc:a0:cf:14:3d:1b:57:6b:a1:89:
15:84:55:e0:3f:07:ed:0a:54:1a:9b:c4:68:fc:30:
b0:fe:61:a7:0f:09:da:24:6b:11:bc:99:4b:08:13:
0e:0a:4f:dd:dd:fc:23:56:9c:f9:7d:92:e1:ce:73:
d4:16:d6:1b:18:7c:38:4f:dd:e5:5e:8f:73:82:14:
45:24:ae:18:a5:82:dd:9c:63:e9:26:c8:06:11:a2:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42068
Signature Algorithm: sha256WithRSAEncryption
1d:1b:36:de:de:57:31:b0:91:8c:d1:d4:1c:29:b6:03:b4:9c:
04:94:5b:aa:58:ee:86:16:1e:9d:30:b9:6a:23:45:d4:db:2d:
a0:08:98:3a:11:12:ab:16:3e:51:57:c0:fc:6e:53:d3:43:cc:
30:dd:90:8f:97:8b:4e:00:15:bf:8b:92:47:b7:57:ae:16:ed:
4a:87:15:6f:49:70:ec:70:fa:93:f5:5b:1c:8a:41:13:1d:86:
f0:46:94:b4:e1:d0:7f:a5:34:6d:0c:8b:82:a3:5c:32:eb:d7:
26:74:43:5c:96:db:a3:1f:ac:0e:fb:b2:d8:d2:fb:ef:be:8a:
62:02:dd:fb:8f:d3:ba:11:49:fd:16:e2:c7:74:ae:a5:24:b5:
6e:0b:7d:58:d0:e1:b4:fe:17:e7:d5:d4:ad:a5:8a:3d:ab:48:
be:94:7c:a6:bb:9c:81:94:4e:9f:9c:d7:a6:91:93:9a:c5:45:
46:ff:26:1f:52:79:b4:6d:95:e4:c1:0e:7a:9c:11:26:57:8f:
49:8f:37:e9:9c:74:65:d8:49:11:02:c0:ad:70:1b:ff:a3:d4:
f9:53:35:20:3a:fd:76:42:ab:34:2c:e2:62:32:db:e9:19:6e:
b2:c4:b5:81:cf:25:e3:36:bd:89:0a:ba:b5:9f:45:9f:84:67:
59:74:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:16 2024 by rpki-client on console-fra.rpki-client.org