Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
File: dHquXSSwyXpCAx81EKFOL5W72Dg.cer (raw, json)
Hash identifier: oAV/bPfllStHSFmA1YyHbihjgUv231lwIOjoanO13Fo=
Subject key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4249C905C93752FA57D07C2A3892F25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.78.124.0/22
IP: 2a05:6a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9c:90:5c:93:75:2f:a5:7d:07:c2:a3:89:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:38:53:d8:37:a0:e8:70:76:cb:75:79:44:
48:94:20:59:0d:bb:d9:14:d5:9c:a3:0a:09:4b:d8:
6a:79:32:3f:5f:b2:33:1a:0f:78:f7:9c:4b:93:9e:
aa:78:c6:1a:24:35:08:de:f4:59:33:4d:0d:a4:03:
db:ee:da:26:d6:24:69:ec:b7:f9:23:62:73:d0:e6:
5d:9d:8e:83:56:db:c5:a4:2e:39:06:f5:b8:83:25:
1f:d9:79:b8:e1:7f:43:9f:40:66:ab:52:69:87:a1:
da:f7:c5:b8:85:ae:a0:2e:62:7e:c5:82:86:65:ee:
a1:0b:96:97:8c:f6:fa:f8:8c:e9:28:15:a5:0d:74:
88:a0:85:a5:08:18:02:b7:73:a8:f3:fa:c2:be:98:
37:8f:c4:ee:95:7d:f8:54:2c:5d:8d:e2:48:96:29:
58:50:13:d7:e3:e1:50:db:b4:9c:da:49:ce:01:16:
2d:00:54:f7:42:20:0c:bb:32:0e:be:a0:1e:95:00:
b8:e9:da:dc:5b:b1:05:d5:40:1c:c9:1c:ba:bb:24:
87:a4:42:0c:81:b8:e2:43:79:ff:f8:c3:b7:b7:d9:
35:76:4d:51:ad:d0:96:2d:2e:e6:3e:4a:02:0b:05:
5c:7e:0a:1c:18:8a:c6:c6:8e:35:67:36:83:5c:b7:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.124.0/22
IPv6:
2a05:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
92:a4:05:6d:cc:06:57:5a:b1:66:c6:82:b7:df:75:2d:93:3e:
2c:22:56:c6:15:be:63:65:0f:b1:c3:91:b3:57:ed:b2:0d:7f:
d4:83:50:e7:c9:68:20:0c:e5:27:05:0a:5a:2d:0f:2a:f1:4a:
fc:94:08:79:96:25:e2:4b:6f:76:eb:ef:6e:f6:33:72:29:a2:
7f:7c:6a:b6:52:0f:a6:a2:64:29:97:de:ef:75:6d:1e:38:e8:
9d:61:e6:69:4f:c6:28:53:b2:ee:8a:7a:8f:5b:26:7f:66:db:
48:d5:56:9e:37:c1:76:ee:af:7a:3d:39:51:7e:d7:49:0c:1a:
99:8f:3d:b6:28:fd:80:9a:6a:8b:ee:49:ea:cf:24:a1:13:57:
85:f1:f8:8e:a3:f1:28:3c:88:9c:80:56:b0:6d:68:f7:00:b0:
a9:d9:dd:8c:58:d0:49:6b:ff:2d:28:4c:0c:43:f0:ba:e6:7a:
00:ed:2a:c5:5a:87:12:bd:0e:c0:75:8e:e2:7e:d6:3a:e4:8f:
43:11:30:2b:2c:06:47:cf:75:a8:09:e8:9e:73:79:c2:8e:71:
2a:fc:dc:e8:c6:7e:0d:d5:af:6d:87:6e:ab:bf:d1:26:d4:84:
d5:9f:e0:75:4c:2a:a0:77:11:e9:32:04:85:e0:18:f8:8d:db:
95:c7:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:02 2024 by rpki-client on console-fra.rpki-client.org