Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
File: hC4XioXWwwtXKyAmHET456S_wnI.cer (raw, json)
Hash identifier: DKBimSpb3Dkb0LcJGzD/bC8/ysP8CkG0sAzuVdoIAUE=
Subject key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7256E0BF3C75C1AA409BC928E91E231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204706
IP: 185.143.128.0/22
IP: 2a0c:f080::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:6e:0b:f3:c7:5c:1a:a4:09:bc:92:8e:91:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:7f:3f:41:72:61:2e:0c:18:8b:a5:c2:ad:
4c:52:87:68:8e:c0:65:ca:9d:3f:13:d0:3c:d9:ca:
c3:91:10:bc:7f:4d:b1:01:3a:6d:52:e7:73:c6:96:
bd:07:6d:d1:02:5b:e7:15:d5:49:61:6b:d4:a4:77:
7c:04:79:8f:d9:0e:4b:67:e3:00:38:2a:ff:c4:0e:
24:72:52:69:94:30:26:52:5b:0a:47:7f:10:6e:70:
14:eb:fb:cf:f3:10:27:5e:e7:63:f4:5b:be:2a:33:
00:a2:c1:af:ed:cb:75:21:c7:0a:6d:29:79:a0:c7:
5b:d7:aa:96:9a:2a:a0:12:f8:3a:79:3f:9e:55:40:
35:ee:25:ed:30:f1:9f:14:66:37:5f:d1:56:b7:1a:
e8:6a:a9:79:e7:f2:16:fc:7b:e2:9e:bb:f6:d5:fc:
ca:dd:b3:bd:de:b6:e7:41:01:94:3d:d3:f5:ea:be:
7f:3b:7d:99:4e:b0:cb:9d:e2:86:a9:8d:07:6e:7e:
2c:0e:69:31:b9:a2:a0:20:f3:56:7c:2a:ff:5c:d2:
6d:1b:56:78:f1:06:67:93:8b:90:a1:80:c6:11:f0:
47:15:b1:d0:f2:ba:cb:a1:7e:99:9c:e5:46:09:34:
ed:24:07:a6:3f:13:93:34:00:bb:bc:4f:9c:e6:c0:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.128.0/22
IPv6:
2a0c:f080::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204706
Signature Algorithm: sha256WithRSAEncryption
a8:b5:83:9d:63:e2:41:41:d7:6a:85:6c:cb:3f:f0:5c:09:4d:
a0:98:ba:19:80:88:7c:07:fe:e4:54:00:4b:30:7a:92:a8:8b:
b8:4c:74:89:8c:f9:89:b8:14:6d:e6:a2:e5:fc:02:3a:c9:65:
6f:72:75:11:ca:89:bd:74:c4:65:d9:e1:0a:da:da:7f:a4:8f:
8b:22:3e:8f:a4:6d:5c:c5:22:9d:30:e5:43:63:66:6e:6f:5c:
60:0f:b9:16:7b:1d:7a:7a:74:bb:59:71:17:8c:81:fe:39:c0:
8e:aa:71:30:b2:47:b4:fa:7c:e8:95:6b:3f:66:f3:6d:a1:d2:
10:12:76:b9:dc:f2:02:06:f1:92:f7:a7:77:89:b0:16:93:84:
5e:df:aa:b3:a5:d6:ae:07:ab:ee:b1:55:a2:2e:f3:1f:0f:bc:
67:51:bb:95:18:32:4e:11:27:f7:1c:64:5f:c3:37:59:be:7b:
5b:3a:94:6b:be:ed:29:ed:05:50:61:b5:29:79:5e:0e:de:94:
2d:94:51:51:9c:5c:d7:0c:22:de:f2:93:cb:53:26:86:81:28:
34:20:64:ef:d7:28:4f:b8:68:f0:7a:6a:78:e6:a7:2b:2a:61:
93:14:a9:95:4d:6f:bf:76:48:50:b4:a1:85:c4:5c:1d:ae:55:
d0:89:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:45 2024 by rpki-client on console-fra.rpki-client.org