Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.cer (raw, json)
Hash identifier: RcLe6MEGibrqAtz/962hgOW4/Au+hMWBeHLAMx1doUM=
Subject key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72738C07EDD5768AB82361BB5A9799B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43882
IP: 79.133.160.0/20
IP: 2a09:5a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:38:c0:7e:dd:57:68:ab:82:36:1b:b5:a9:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87943cb86e3a703813778fab790d65f0da21615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:37:af:14:15:c7:63:45:54:86:87:37:64:
44:0f:65:5c:96:c1:69:07:3f:2d:dd:ed:c8:76:ac:
08:e7:b0:8c:69:9c:e5:9b:8b:3d:a4:38:5d:a0:20:
94:d7:51:aa:33:8d:ff:17:92:39:e9:d4:4e:48:15:
c3:68:66:e5:85:20:7e:bd:d7:77:6a:95:dd:1e:3b:
5f:52:10:03:78:8e:84:13:8a:ee:c7:85:18:20:97:
1f:e4:11:28:4d:96:a4:28:ca:f3:a9:e5:d2:71:e5:
24:7e:8b:5b:24:cb:59:d4:9e:25:ac:17:85:c7:17:
67:ae:95:44:51:7b:7f:99:d5:7e:cd:fe:34:b9:cc:
6b:2b:fd:0c:d7:32:3c:25:7a:d6:34:06:84:b6:15:
c4:04:1f:bb:37:14:e4:50:b7:4f:7d:5c:e9:61:0d:
6e:c8:0f:a8:54:66:03:e7:b9:5b:77:18:be:e7:a3:
21:1b:56:a3:7c:4b:3c:ed:ec:e4:45:84:25:cc:f7:
ce:16:91:fa:8a:2f:d6:3a:cf:69:68:ae:65:ef:f0:
00:51:b3:70:20:44:4b:e9:1a:74:0a:4b:54:80:dc:
bc:ab:98:15:b9:43:b8:2e:d5:a0:ce:7f:37:3b:88:
7c:21:dc:88:61:70:2e:f6:8b:c1:3f:5a:04:88:b8:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.160.0/20
IPv6:
2a09:5a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43882
Signature Algorithm: sha256WithRSAEncryption
6f:59:0b:8a:73:3f:d4:b3:a8:88:45:3e:d2:0c:62:e6:df:fa:
9f:ef:c6:32:07:32:5a:03:b3:8e:81:da:04:9a:1b:41:10:10:
07:84:0c:81:2c:06:56:8d:99:9c:27:fb:c1:ea:47:e7:86:56:
43:0a:a2:78:2a:66:a5:16:2f:21:22:60:b5:cd:a5:1c:d2:3a:
36:82:24:5e:f3:3e:21:b4:91:5e:d6:7b:d2:41:e3:e6:d4:2c:
98:a2:04:15:73:04:4d:41:5f:23:4b:73:02:aa:14:c9:d0:59:
1b:97:b5:a9:68:ba:c7:28:98:0c:15:95:55:f7:c6:a0:b2:98:
27:41:a5:c1:4c:15:cd:e3:0d:22:f3:3f:b7:54:29:77:b1:e0:
b7:a7:27:8b:b6:aa:a7:40:8f:6b:bb:1b:b8:71:2f:3a:41:35:
07:e7:79:43:dc:19:70:53:60:b2:cf:cb:9a:15:45:f9:0a:10:
ba:8d:ac:50:6c:f4:a4:e6:a2:2f:88:df:e8:f9:53:e8:75:cd:
01:aa:aa:75:b8:cb:5a:db:c5:84:4e:39:2e:b5:0e:31:a3:66:
54:54:45:18:f3:1c:e2:c1:e2:18:92:26:24:74:aa:1e:be:ca:
a8:f9:11:0f:46:58:82:08:db:04:16:d3:09:7d:58:f3:e2:d2:
51:bd:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:23 2024 by rpki-client on console-ams.rpki-client.org