Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer (raw, json)
Hash identifier: 7qNseKZd+VwKbZUKz6ZL5YRv8VZiqBX+UstTcKHpip4=
Subject key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F955DC1D82200E5526D32B0E51D8AE262
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 May 2024 09:38:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.46.143.0/24
IP: 2a14:7480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:5d:c1:d8:22:00:e5:52:6d:32:b0:e5:1d:8a:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 09:38:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:21:6a:32:72:9a:f8:5e:e9:a0:f4:d3:72:
b9:05:a8:d4:48:ee:40:6e:70:61:df:88:f0:40:30:
c8:48:d6:3b:d8:d6:9d:b6:1a:9d:ac:44:c1:80:a8:
72:32:be:0b:6c:92:92:38:8b:14:68:22:6b:05:b8:
0c:2f:0c:cb:0e:2b:63:f6:71:fb:ba:9b:d0:e5:24:
79:49:fd:4e:9d:aa:33:8c:08:41:0a:ba:75:91:13:
2c:0e:fb:d0:86:7c:56:7c:5e:1d:e3:2f:91:fc:6c:
a8:09:b6:57:8c:5f:aa:88:ac:1d:0b:18:48:84:65:
5d:cb:ac:43:75:19:a0:05:3c:52:95:54:e4:c2:c0:
a6:75:f8:1e:5a:05:95:de:2b:85:77:26:d1:53:c9:
bd:9e:48:3a:1e:85:9b:a6:77:f3:5b:62:5d:71:6b:
57:07:32:7f:f9:c5:e3:0e:f7:eb:6a:2b:5d:d0:31:
01:ce:37:9f:b2:6d:46:46:76:51:2a:9b:06:56:49:
56:fa:6f:37:d6:07:51:4e:01:d8:0d:38:49:ca:b2:
9c:f2:3a:1b:65:d6:d4:a1:62:5d:ae:44:ac:10:5a:
5f:07:81:45:e0:d7:b1:01:eb:94:85:4e:bf:75:34:
97:bf:a7:df:a9:d0:be:d4:15:ce:a8:0d:15:85:53:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.143.0/24
IPv6:
2a14:7480::/29
Signature Algorithm: sha256WithRSAEncryption
5b:59:4e:fc:0d:62:96:f6:78:d7:9e:2c:5f:97:59:11:86:3c:
d0:8f:4e:8d:97:de:a7:67:81:93:83:bd:4b:98:e7:64:bb:af:
5e:9f:7b:ca:12:35:10:17:43:38:fb:5c:9d:76:de:31:d6:79:
79:92:50:cf:cf:3b:61:ec:04:f0:b3:c6:46:24:87:c7:45:56:
f2:83:4a:b0:f3:40:51:54:ec:0b:0c:ce:33:45:b8:04:f4:c6:
c7:aa:4a:69:8d:fb:5c:b8:86:98:d1:64:71:4b:d5:2e:62:72:
b6:e3:d8:93:d1:67:9b:29:17:6f:a3:97:32:32:18:47:af:44:
04:da:07:5f:ec:30:85:65:c7:de:af:cf:17:2d:1e:d5:ee:e2:
85:22:13:16:37:27:1e:ed:6d:2b:e9:7e:03:9c:31:b9:1d:8b:
41:a7:2a:83:21:a1:aa:58:bf:25:16:e4:a8:2d:db:1c:2a:0e:
85:a5:f5:78:8b:af:bb:d7:40:09:89:bf:9f:d7:f1:19:b6:92:
ba:4c:4b:11:42:8e:81:27:ba:cb:5b:15:d8:1e:15:f0:ff:3b:
f6:12:97:89:44:80:cd:db:65:81:9c:4e:8b:2f:0b:58:f4:35:
ee:b9:69:d7:3a:eb:b7:ac:22:c1:82:14:6b:7f:ae:cc:79:7f:
31:95:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:20:28 2024 by rpki-client on console-fra.rpki-client.org