Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer (raw, json)
Hash identifier: 4oxULA1kE5QKxyYIX6Fw5cN4Ia4whXsQJ8py3LyWICM=
Subject key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5007D7A0D45651505A47C019FD3A7F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.95.162.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7d:7a:0d:45:65:15:05:a4:7c:01:9f:d3:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:38:dd:28:20:4e:61:ac:8c:79:05:b3:ab:
e5:be:ef:da:ab:86:4f:51:ee:b7:34:5c:3b:ed:98:
d6:f5:0b:59:54:f8:c3:58:61:13:61:c2:d6:20:90:
31:83:4a:78:04:77:e8:02:df:0b:80:f0:22:5a:d0:
50:79:e4:ae:f3:42:58:22:70:4f:57:ae:32:e2:96:
42:1e:5f:77:98:a7:ff:4e:10:97:1d:6d:d0:e9:4a:
89:ad:82:4a:c9:42:38:28:dc:f4:84:4d:55:f2:79:
32:8e:6c:d1:1a:cd:33:cb:05:8b:3a:19:f1:4d:85:
3a:bb:de:94:87:f3:12:e0:67:15:07:6f:ed:44:3a:
f5:6a:b4:7f:ec:1e:86:7d:32:e6:b9:2f:a4:a2:56:
bd:a0:aa:86:e7:fc:55:0c:59:56:b6:2d:93:e3:cc:
d8:c8:29:85:24:8f:d4:34:0f:ae:6f:b4:26:bf:2a:
29:c6:2e:08:67:f6:13:68:19:38:81:6e:11:dd:5c:
91:e5:c8:99:66:43:e2:1c:ec:a1:bf:b6:90:87:c9:
12:53:1c:79:82:89:81:98:9c:6a:20:8c:8b:d2:f0:
54:b6:75:96:e6:80:ff:3c:51:39:4a:77:26:68:bd:
19:57:18:ad:97:65:5b:cd:eb:a1:a1:a3:e7:fd:c4:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:74:29:36:b0:63:f2:6e:a3:b7:24:95:df:f3:0e:f0:d1:b5:
8e:7d:fe:98:1e:75:ed:da:48:55:e2:e2:d7:8f:f4:eb:7a:ad:
61:03:70:30:01:0e:5f:41:18:cf:62:a3:e2:de:2c:aa:58:cc:
5f:22:83:a7:b3:d7:5e:06:2c:52:09:54:69:68:90:72:cc:8d:
f4:e8:5f:7b:8a:fe:f5:76:05:13:cc:8d:3b:ff:2c:d3:19:61:
80:62:2b:53:20:f7:63:89:c9:ce:84:3c:e3:9e:44:47:70:d9:
22:76:50:c4:1b:b5:96:c6:a2:ac:47:bb:36:5f:9b:06:4d:dd:
7d:8d:99:f3:9e:38:bb:5f:5e:cd:08:a0:a4:4f:1b:39:24:a2:
42:2e:18:f6:70:ca:09:f3:e8:5a:17:57:89:ec:6e:6d:7d:e5:
2e:48:f8:1a:16:88:52:d8:e9:92:90:30:78:a3:c5:e1:6e:10:
b6:d3:7c:ee:c5:6b:f0:87:8e:b8:00:5e:8a:1d:45:2c:8a:c3:
d9:06:85:ba:fb:6a:41:1f:f1:c9:fc:7f:d7:41:fd:78:4e:6d:
6f:5c:26:d2:40:18:c7:b5:5a:06:1e:cc:3e:71:3b:d7:71:d8:
a3:74:3f:0d:10:0c:aa:ae:e4:fb:3f:ee:6a:56:f1:99:66:de:
f5:cc:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:51:54 2024 by rpki-client on console-fra.rpki-client.org