Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer (raw, json)
Hash identifier: O6+s4xKb8e8Ys9qL1xE2HhOYnnRG97aJohWo+WSUKeI=
Subject key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6C9197ED8EB4EEF364B546F28CA7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52115
IP: 46.252.224.0/20
IP: 185.168.140.0/24
IP: 2a05:e780::/29
IP: 2a0d:cf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c9:19:7e:d8:eb:4e:ef:36:4b:54:6f:28:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:0a:8b:80:ed:4a:ae:c8:5d:e9:fa:80:4d:
b6:b2:47:21:18:c3:64:2f:1d:63:0d:90:c9:f3:f8:
47:b0:49:b6:a4:f0:b8:8a:98:cf:2d:3c:fe:d2:31:
1e:f6:60:27:e5:ef:d3:fb:37:ef:b8:b7:e3:23:17:
85:4b:de:79:f8:c4:67:45:ee:5b:2e:f6:8f:f8:bf:
a5:9f:e7:15:d0:a6:0b:d3:e5:a3:79:36:1d:e3:f9:
60:ec:f5:5b:17:09:c8:8c:94:ef:0e:1e:66:3b:e5:
72:97:99:6c:88:42:ad:97:76:d2:e3:31:86:34:7e:
fc:55:9f:b3:89:0f:1f:f6:c9:3d:2a:cd:9e:27:d4:
f5:06:3f:81:b5:0e:15:60:30:a4:21:9b:ed:7e:4d:
59:ea:e9:cf:a5:b0:a3:9c:c5:60:d0:79:cc:5b:ec:
45:1f:48:a2:a9:3d:25:fd:c4:65:8f:aa:39:ea:ea:
a9:c6:09:a7:e4:4b:b3:de:2d:55:30:8f:7a:13:0a:
00:c1:bc:ed:77:87:80:f7:6a:5f:5a:2a:64:ed:31:
5b:37:bc:ac:8c:b9:b9:d5:f4:00:12:70:33:a5:db:
ad:52:23:b6:79:a1:05:0c:3d:d4:1e:d2:db:fc:39:
74:9e:97:4d:58:2b:20:99:32:a8:ef:ed:6d:8a:10:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.224.0/20
185.168.140.0/24
IPv6:
2a05:e780::/29
2a0d:cf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52115
Signature Algorithm: sha256WithRSAEncryption
60:01:1d:2c:1e:81:df:77:22:9a:32:19:34:cd:07:67:82:d1:
65:2c:37:67:1c:32:ef:e7:b8:ba:75:42:dd:44:98:eb:2c:68:
d6:db:3b:b0:61:30:6f:3b:81:ff:5c:d5:7d:7c:dd:db:84:4c:
36:10:a5:74:b2:3d:eb:87:98:5a:5b:ab:66:8c:66:8f:90:7c:
db:42:4d:8d:a4:21:77:50:15:2d:5b:ae:d4:4d:96:d0:3f:1b:
fb:6c:33:39:38:54:e6:bd:09:aa:37:90:70:10:15:ef:fc:ba:
68:a5:c9:f8:74:51:b5:35:2e:0f:fe:26:cd:e8:cd:d2:c7:bb:
64:1e:83:13:7b:5c:70:0e:00:70:35:9f:54:1a:38:d6:e5:e7:
43:ea:a6:d4:e3:30:c9:00:c7:a6:3a:6b:46:cc:3a:e3:ae:28:
43:9b:bd:d9:ec:56:58:58:17:43:a2:de:f1:b8:03:cb:68:a9:
c9:cd:5e:4d:05:61:60:71:48:c1:66:df:c9:8f:b3:14:0e:5b:
2f:20:e9:3d:3e:23:b8:64:3d:e0:5c:50:16:ea:13:1a:15:a8:
ad:97:00:70:18:e4:46:24:01:5b:69:25:5e:f5:13:42:10:4d:
d8:fd:81:91:3f:ad:24:37:7f:0f:a4:61:fb:1f:aa:e6:06:98:
51:a9:64:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:58:22 2024 by rpki-client on console-ams.rpki-client.org