Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.cer (raw, json)
Hash identifier: 3EerWTfy/jV7GJ5N3cho/yT8xM5FRM/Xr4Fns7bZSm4=
Subject key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190FD6ACD70B9253046943AEEFFA3A05D33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jul 2024 07:35:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205925
IP: 185.197.212.0/22
IP: 2a0a:7c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:6a:cd:70:b9:25:30:46:94:3a:ee:ff:a3:a0:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 07:35:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:9a:5e:bd:92:0e:2f:0e:0c:52:50:4e:e4:
59:77:3e:84:7f:b8:b6:f5:c5:3a:30:79:6a:5c:cb:
36:97:f6:dc:f2:cc:8b:6d:76:51:f7:b2:4e:58:89:
31:8c:a0:c7:33:43:48:81:7c:be:a2:7f:b4:29:47:
37:eb:5e:a5:eb:92:ac:98:c5:9c:52:90:85:33:94:
17:f9:df:38:89:a8:57:b7:5a:f9:4c:c9:61:99:54:
4b:67:2e:95:0f:76:dd:e0:f1:40:ae:78:cb:5a:f2:
fd:65:8c:47:f5:95:69:ac:6f:b5:50:cb:ce:14:6e:
3e:a8:84:29:ad:36:bc:f3:7f:31:15:aa:9d:fc:15:
9f:81:9e:8c:38:17:84:5a:c3:07:b2:88:41:ec:69:
c2:b6:9d:c4:86:ab:d3:b8:82:6e:be:3c:08:ea:98:
57:aa:1d:38:36:a6:9e:82:e3:a1:25:8a:c3:a7:a7:
fa:59:cb:a6:17:e9:26:9b:b1:c4:98:27:97:d7:e1:
ca:ac:da:97:4e:8d:1d:db:93:94:1b:2b:6f:e8:03:
66:41:c6:ec:06:76:09:3a:1e:09:5c:33:85:92:40:
a3:ac:36:db:9d:4c:d9:ba:de:89:78:ae:89:43:c0:
c8:77:e0:8a:31:8f:32:c7:c6:b5:05:e1:48:a8:c1:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.212.0/22
IPv6:
2a0a:7c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205925
Signature Algorithm: sha256WithRSAEncryption
56:bf:ab:4d:9e:6e:2c:49:a5:95:ca:cc:b4:50:dc:eb:7a:35:
a8:be:91:25:86:33:87:39:8b:5a:fe:0e:3a:ad:55:5a:bf:d3:
24:a7:ec:77:76:8f:ad:87:f2:26:fa:f7:8f:2c:2f:3d:56:c0:
80:91:9a:5c:21:9a:59:ae:b6:e3:bc:05:7f:3c:d9:ff:45:bf:
fa:1d:34:85:09:38:9e:50:8f:3e:bc:c6:d3:6e:08:8e:78:91:
9e:d2:76:77:d3:15:c4:d3:d1:e6:1c:f0:15:40:bd:b4:1c:2a:
0e:2d:d4:86:8e:2f:44:e2:35:48:ef:08:16:c2:15:c1:3f:b4:
ba:d2:52:31:b8:7a:5a:ff:28:7b:d7:eb:05:35:aa:de:a8:9f:
21:8d:99:e2:18:90:fd:24:32:62:a3:e3:94:4e:a8:83:b6:62:
4c:7b:1d:6d:aa:99:26:aa:88:be:8a:25:64:ac:bd:ed:cf:fb:
5e:e1:05:bf:df:cc:e8:60:05:0e:39:93:1f:d8:59:79:c0:12:
14:09:94:82:29:5a:8e:61:74:a0:e0:3a:9f:fe:27:f3:38:00:
86:0d:45:a9:db:d6:73:8a:74:d2:96:78:d3:a2:4b:24:2d:e7:
96:be:5e:1a:c9:2c:5c:8c:e1:38:b7:8f:bd:f5:ab:a1:8b:dc:
ff:6e:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:24 2024 by rpki-client on console-ams.rpki-client.org