Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
File: T_hs8z4V6kCJ2inip4gddG34Ju8.cer (raw, json)
Hash identifier: YWPSDzCGME1FNQUFIfJskHgptP9wpnbx8pUkfDzr+QA=
Subject key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3857733024D1B0194AB1BB6FA594
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199959
AS: 205320
IP: 193.29.56.0/22
IP: 2a07:efc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:38:57:73:30:24:d1:b0:19:4a:b1:bb:6f:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:50:2b:e5:32:b9:c6:44:3d:2c:49:a8:8b:
61:9c:e7:7c:4f:6a:8a:2a:b0:8c:40:83:3a:2e:76:
ae:87:18:cd:c0:b4:d9:dc:71:4e:30:f2:8e:95:0d:
63:f0:17:80:46:cb:5b:2a:3d:86:8d:92:c5:63:bd:
80:86:aa:28:24:4c:ee:74:07:f2:99:90:b4:0a:6a:
cf:e4:78:c2:d9:1d:45:b6:8b:cd:af:7d:b9:86:3a:
a6:ac:fc:73:0f:ea:3d:8c:d9:3a:62:3e:b6:3c:db:
4e:c6:40:46:f3:88:54:42:b2:1f:48:32:96:5f:c8:
e8:df:8a:ed:80:b3:01:4f:a3:bc:72:30:28:e0:5c:
4b:15:c2:5d:0f:92:ac:7c:50:ba:a4:96:0c:d9:f4:
e8:ad:05:e1:2a:ab:c8:3a:9e:a3:79:45:0d:89:80:
10:a2:de:04:dc:d4:cc:e7:04:79:3a:98:ef:89:70:
9b:30:1b:c2:8e:41:4a:86:11:08:81:6f:55:88:50:
09:c9:b1:03:e8:1e:67:1f:f6:24:85:3e:e9:ec:25:
3a:c9:53:cb:6e:9a:a5:a2:4f:da:41:4a:18:1b:48:
9f:14:77:de:74:1b:9d:2a:60:10:63:2f:6a:84:e7:
02:6a:aa:c5:20:13:af:19:97:f2:d9:e8:9d:bf:05:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.56.0/22
IPv6:
2a07:efc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199959
205320
Signature Algorithm: sha256WithRSAEncryption
9a:0b:d6:ba:35:89:9c:e8:e3:aa:08:4f:e4:f6:1c:d5:b8:9e:
45:77:79:c0:5e:28:ad:41:ea:50:78:47:2a:0d:58:1d:53:95:
a8:dd:83:d4:94:4c:19:71:5a:ed:72:4c:27:90:30:b9:5a:c9:
08:b4:5f:a8:a5:c8:13:ef:3d:d2:86:9b:4b:78:53:d0:b5:58:
3b:6b:3e:f1:ce:c1:12:ba:b0:dd:10:75:5b:8d:ce:b5:3c:52:
ca:94:86:db:37:fe:13:3a:d9:a8:9a:b6:af:a1:a8:59:95:c1:
1f:1e:0f:06:ef:40:1a:61:bd:e0:ac:94:0e:e9:50:2f:15:5b:
8e:1e:c9:1f:31:64:a9:58:e7:12:31:c2:aa:d6:21:f3:7a:d8:
f4:c1:9f:9d:b9:8a:dc:4f:a8:22:95:fc:45:7a:df:cf:48:e0:
d5:36:7e:e0:94:f3:a7:7a:87:3b:87:77:b1:1c:7e:aa:fb:03:
7b:9e:91:bf:ec:c5:be:c7:6a:28:d1:60:37:10:7e:99:b4:ba:
f1:07:e3:3a:5e:ef:b1:81:ac:e9:67:00:39:62:a5:e7:69:33:
d8:3b:ed:cb:e1:98:55:a8:cb:ba:14:dc:60:9a:4c:5d:ea:c2:
13:39:02:e5:29:9b:bb:cf:69:aa:21:6b:27:8b:ae:58:c4:8c:
6c:94:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:24:55 2024 by rpki-client on console-fra.rpki-client.org