Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
File: fHcuHibmwj9ArWZoyF_pUNoQY_w.cer (raw, json)
Hash identifier: d47/NptDE9S9Li2oX1WJNozjYrfNI8Zx6fe/NgOnZIo=
Subject key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DD37E044279F4F26731188F1E6C041
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51301
IP: 185.135.188.0/24
IP: 2a10:15c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:37:e0:44:27:9f:4f:26:73:11:88:f1:e6:c0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:41:cb:60:e4:46:25:f8:5c:6a:bd:a3:19:
36:88:bc:bb:26:6e:f2:27:98:78:1d:c8:2c:02:66:
4e:3d:a2:69:f4:c4:f9:1a:e4:63:3a:9d:06:c1:7a:
47:1a:9f:00:65:3e:9a:e5:31:48:5f:83:fe:e3:83:
46:85:c6:e2:cf:7b:b0:5a:d9:81:49:5b:1d:b5:11:
5b:cd:4a:97:b4:ef:89:62:a1:0b:88:50:3e:30:2f:
29:bd:b8:27:34:7b:43:81:41:1e:54:df:98:c8:e9:
fd:85:bf:9f:5c:c6:31:a3:f7:d4:18:27:1f:18:41:
e0:a3:14:4e:72:c8:3a:2d:91:f8:ce:4e:6e:37:e3:
36:c8:62:14:6d:79:df:54:6e:67:84:43:d9:39:4e:
f5:92:a9:7b:da:7b:29:3f:4e:bb:15:24:a2:44:8e:
10:68:41:05:7a:7e:77:0c:5c:17:c8:9d:fa:03:cf:
df:bb:4e:9d:bd:3f:13:64:b0:e8:88:5e:a1:6a:9b:
9b:0d:51:15:e3:f3:d1:86:09:48:6b:af:3f:66:40:
a5:55:2d:e6:ee:65:4e:18:fa:a0:89:47:59:fc:ec:
3f:59:cd:a0:fd:9f:86:89:f5:91:6c:49:fa:5b:c4:
fe:6b:0b:d2:6e:d3:5e:e1:c0:aa:32:26:9c:a1:d2:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
IPv6:
2a10:15c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51301
Signature Algorithm: sha256WithRSAEncryption
78:7d:ee:94:31:51:95:2d:93:cc:99:37:e3:63:2b:24:2d:1e:
24:c3:b2:ea:ec:94:e4:49:70:e0:4b:c2:42:16:a4:ae:78:b9:
c3:f5:23:88:9b:40:08:32:79:cf:9a:ed:33:37:d9:e6:21:39:
b7:f4:0f:7f:ef:b6:2e:8e:a4:d6:79:ab:e0:0a:df:a0:f9:f3:
75:43:d2:17:73:3d:2d:3b:9a:68:ff:c8:7a:fb:00:aa:d0:0d:
9f:5b:59:2c:b7:df:6d:ec:57:69:b2:63:c3:13:41:f3:2b:26:
be:5c:9f:05:65:c6:5b:5e:ed:96:c9:ac:a0:10:2f:4d:8e:65:
26:5b:ea:6d:b1:0e:87:21:92:9d:54:9e:cb:d6:0f:ea:15:ca:
d8:f1:65:67:2d:46:8f:fc:06:29:3d:57:38:4c:17:fc:9a:87:
9c:6a:3f:a8:45:3f:11:c7:78:90:e4:69:80:5f:56:da:ec:e6:
60:f7:79:ba:40:18:c1:06:8d:a8:16:ff:dc:bc:f6:1f:a6:6c:
9c:30:5f:ab:96:35:ba:97:67:35:e4:36:24:b7:ae:c0:d4:cd:
52:35:d6:2d:2c:6f:09:d8:5f:2b:bf:3f:0c:88:b1:88:93:df:
f2:bb:08:a0:79:c2:1b:65:f2:91:85:43:47:c9:8f:8a:f1:f8:
27:bd:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:08:18 2024 by rpki-client on console-fra.rpki-client.org