Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer (raw, json)
Hash identifier: sDhFa4DbMYf9U0dn2IroS60gSJ8GVmkpnMd92UQVtEA=
Subject key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348E6CF7FF2C07288871B055EA844FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57846
IP: 37.130.152.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e6:cf:7f:f2:c0:72:88:87:1b:05:5e:a8:44:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:2e:e7:a1:f5:fb:e3:57:0d:aa:ce:13:79:
b9:b1:aa:86:f7:86:1a:11:ee:2a:11:41:2d:9a:23:
4e:af:c4:b4:58:09:91:ef:3b:a8:56:c4:66:6f:79:
38:2c:50:21:35:8e:0c:7c:c9:65:dd:68:7f:c5:76:
e9:6f:68:ea:72:cc:46:fb:45:cc:ea:b2:a5:da:be:
c0:dd:f0:33:03:ec:bb:aa:d9:37:7a:7e:c4:71:83:
12:80:33:9e:a0:c3:94:95:ce:29:8e:d0:d2:fb:a0:
98:13:a6:fd:15:0f:db:d1:1b:6c:82:13:3d:2e:37:
a5:33:5e:c9:0e:99:55:9a:13:67:21:f8:27:fb:71:
02:a1:d4:f3:96:40:dc:db:ae:20:e4:0b:4c:09:30:
0a:12:01:62:97:5d:0f:99:31:63:55:37:59:3b:9a:
7c:0b:04:71:14:11:49:52:db:a0:28:2a:09:45:45:
a2:3d:a0:ea:70:3f:7d:2a:42:f5:a1:55:58:81:1f:
1f:b0:f6:d3:9a:83:15:f5:aa:d0:a3:dc:72:81:ab:
14:c8:ca:9e:7d:ec:0f:d8:e3:cc:55:e8:60:72:b1:
41:14:12:b9:82:6d:b6:85:45:3f:2d:d3:c7:f9:6b:
4a:a7:a1:d6:a3:58:8f:bf:3c:e0:27:ec:f0:a8:12:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.152.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57846
Signature Algorithm: sha256WithRSAEncryption
40:ec:6f:1e:e7:79:e4:a7:bf:8b:93:23:dc:af:50:f7:8d:ed:
a9:b2:bc:e0:b8:e6:34:2c:04:fe:5e:d6:c7:c7:c8:7c:b1:5d:
8c:dc:95:00:16:84:22:83:65:ea:5e:49:e6:93:79:d6:f6:18:
8f:f2:2a:f0:4e:f6:12:0c:9c:0c:1b:3f:45:b4:20:6c:97:70:
5b:f5:15:0d:ca:6b:3b:51:aa:e9:f7:b4:7f:cc:03:62:83:03:
51:fb:a1:39:cb:84:62:7c:ee:f8:36:df:43:12:66:6e:65:ae:
00:d0:b6:47:bc:85:ae:72:80:4e:30:b3:f0:5b:bc:ca:c2:cf:
82:ff:9c:59:c4:87:d0:ac:f0:60:0c:bd:c2:31:ad:70:1b:cb:
e6:42:db:3c:da:3e:94:79:28:46:f6:35:ae:1d:c0:a3:94:eb:
b8:f2:12:e3:a3:57:a0:76:a2:68:ba:c2:95:66:d3:68:a1:dd:
50:5a:68:3d:c0:4f:54:78:fa:31:60:32:87:d0:7b:98:2c:d9:
d1:d0:4d:05:2e:f7:50:76:aa:47:9d:cf:d6:9f:a0:fb:0c:6f:
9c:1c:46:01:8e:67:a2:3c:c3:a2:11:37:cb:33:f2:6d:55:75:
88:0f:8f:11:f7:94:8b:a8:fa:7a:3a:b5:95:eb:ef:0f:2e:bb:
c6:45:16:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:16 2024 by rpki-client on console-ams.rpki-client.org