Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.cer (raw, json)
Hash identifier: qdeWdkBhmt2kIW73shY5HxP2S+GGUZDl976JjQuITp8=
Subject key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF34C9540BE212C06353198CDD1F06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.1.109.0/24
IP: 2001:7f8:c3::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:34:c9:54:0b:e2:12:c0:63:53:19:8c:dd:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:58:ef:02:4a:03:44:42:16:e2:43:00:12:
fa:a2:55:31:cd:86:f4:b8:ec:a3:d8:1b:3e:f4:56:
f2:08:af:f5:98:bb:c9:50:d5:91:a2:12:02:06:45:
31:8c:94:77:bf:c8:21:5e:f0:68:50:55:31:a0:3e:
20:50:f3:17:a8:3c:5d:cf:d7:46:28:24:24:d8:6c:
60:e7:0f:d6:b0:b1:6d:94:14:d7:69:45:27:e0:23:
4c:95:c3:92:7a:bc:65:a3:2f:77:a8:9f:12:fa:d9:
fb:92:cc:28:95:ec:e6:39:68:6a:69:8f:65:dc:eb:
77:eb:47:49:10:3c:b9:ed:22:ec:fb:1d:4c:81:37:
c5:28:0f:75:fe:f9:c3:16:9b:80:32:aa:be:8c:61:
6d:b0:b5:89:0b:7c:e8:33:f4:90:db:80:0b:7e:0c:
d0:bf:fd:f6:e9:f2:02:48:f8:bf:cb:04:e4:78:b1:
73:32:f3:8f:ef:ed:91:b5:e5:6f:5f:c9:ba:c7:06:
6d:1d:c6:f0:6b:c0:88:cc:72:45:dc:a4:00:2a:6e:
c3:45:b3:8c:76:2b:50:b9:d9:fb:2e:67:5e:f3:df:
c9:b2:78:84:87:80:da:8a:21:9f:ad:5b:4f:57:70:
36:11:6a:ce:d2:d6:80:db:80:b6:79:2f:8e:10:91:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.109.0/24
IPv6:
2001:7f8:c3::/48
Signature Algorithm: sha256WithRSAEncryption
52:43:5a:46:b9:89:9d:65:5e:aa:f0:e9:b4:77:6d:cf:8e:0b:
83:f5:dd:6e:dd:a1:62:d7:1a:df:d8:ba:59:45:3e:42:9c:3e:
31:ef:8c:75:1f:ba:4d:f6:ac:35:ce:19:8b:fe:0d:d8:0a:2f:
52:62:aa:92:29:83:a7:32:a1:f1:d8:e0:ed:78:02:9d:91:c8:
11:70:69:5b:06:16:34:b0:d2:5e:44:44:6d:e5:ec:b1:ae:7e:
62:19:0d:66:ca:ef:db:56:24:c3:38:dc:8e:eb:f9:77:86:f0:
78:5e:e8:46:24:d8:20:b4:ab:b0:7b:67:be:55:ea:e9:68:13:
71:be:53:70:12:56:7d:4c:45:db:1a:98:e5:b2:6b:50:c8:33:
e3:d0:7c:d5:43:84:07:4c:69:c4:da:fd:ed:32:43:8b:9e:40:
af:fd:fb:e6:80:81:5c:40:85:4d:38:fc:78:96:a7:b7:b1:60:
37:90:19:4c:ab:5a:f1:3f:60:71:fa:4f:f9:d5:92:7c:3d:56:
e6:ee:64:69:18:76:c5:f9:1d:a5:6f:56:f1:b5:59:81:d1:72:
e0:0c:e2:85:d9:27:fa:d5:13:c7:2b:aa:37:fb:90:d6:8e:9f:
36:37:13:1e:c3:d9:6b:8d:e0:84:4b:c6:78:a1:d6:7b:d1:31:
b5:0a:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:23:08 2024 by rpki-client on console-fra.rpki-client.org