Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer (raw, json)
Hash identifier: ESO047dOEOo6UF+ku1XvbIfZe0ombA8/DvUuas1Y2c0=
Subject key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EF855BA9C5AFF13BB2908388CCCD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199272
IP: 185.14.24.0/22
IP: 2a03:a740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f8:55:ba:9c:5a:ff:13:bb:29:08:38:8c:cc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:8b:58:49:68:d4:00:f0:ca:7a:a7:d6:0b:
fa:44:f2:a0:b6:cf:ec:59:77:99:c9:c0:a7:6b:63:
4f:42:ed:60:67:a9:97:20:c3:db:69:94:bc:b5:00:
77:eb:3c:1b:8f:e5:6a:79:0e:ca:6b:85:f8:85:7a:
85:29:3a:34:8c:76:ba:ad:fa:93:b2:cf:a0:58:58:
72:c3:7f:ac:d9:9e:5e:a0:b3:f4:24:64:0f:13:1c:
7e:0b:51:f6:e4:8e:d7:6e:2b:d4:47:af:a2:c5:9a:
ed:37:92:76:b4:1c:57:af:c8:30:9b:01:4e:6d:58:
49:3d:e6:13:6b:63:64:08:e1:af:14:46:7b:4b:44:
12:fc:4e:08:ec:86:9f:ba:f6:dd:e2:5e:dd:6c:c1:
29:fa:04:1d:26:c7:38:61:80:14:77:09:39:ad:49:
ed:91:48:eb:8c:cc:38:c1:39:97:62:a2:d7:c1:2e:
5c:78:d3:fe:9c:41:82:5b:46:7b:93:b0:4e:a6:b2:
3d:21:ba:89:f2:b6:9f:ed:eb:2e:80:93:7f:26:b3:
71:63:b4:6e:62:90:0a:f3:94:f3:bf:2e:67:32:b1:
7f:3b:16:72:4e:62:13:0b:98:6e:b5:e9:d9:cb:eb:
2b:2f:5b:e4:87:14:cc:f4:73:ed:cf:5e:40:e2:db:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.24.0/22
IPv6:
2a03:a740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199272
Signature Algorithm: sha256WithRSAEncryption
9e:98:84:7c:95:2f:e2:1f:e0:68:85:26:46:a1:8f:22:35:d9:
dc:67:74:a3:dc:89:35:69:a2:39:49:46:f6:44:6a:c6:ff:32:
b0:c2:d6:fe:58:7f:ba:ec:ec:db:f1:eb:a5:7e:22:12:f8:8f:
03:05:fd:5b:84:c6:1c:99:7b:29:42:89:99:66:95:10:fc:13:
df:77:7a:9b:72:9c:3e:4a:ec:47:87:83:44:a0:41:85:74:56:
f9:d4:d3:68:08:0a:7b:39:8f:25:d5:f8:32:15:33:22:61:cb:
12:31:a9:f7:aa:2b:f8:08:97:99:05:ae:47:d1:62:77:a8:bf:
f5:b9:2c:b0:6b:8b:f4:67:5d:bf:c9:8f:dd:e3:d9:6d:89:86:
82:2f:86:ea:58:b3:19:cb:5f:7b:97:58:51:a0:a1:1c:fc:72:
ff:39:b0:b5:45:4b:11:bd:b7:de:67:83:45:0f:8f:06:3b:34:
b5:5c:e7:3b:6c:aa:99:66:52:b3:50:52:8f:86:30:02:99:cc:
70:64:06:24:19:86:f2:cc:42:49:e6:8d:27:3d:e5:20:8a:08:
66:b9:85:e4:4b:24:66:1c:47:5a:ee:ca:e0:9d:66:59:8a:68:
62:d7:53:ec:2a:05:e4:83:14:5b:f3:f7:66:ff:6c:69:c8:2c:
d4:b4:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:55 2024 by rpki-client on console-fra.rpki-client.org