Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer (raw, json)
Hash identifier: PmmYYFRIycpobgJ/luC9aFxy7rHoi0FEeiNxX2ms+/g=
Subject key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B801A6958D1BCFE7F2DDF223736DC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12459
AS: 61295
AS: 201789
IP: 185.54.160.0/22
IP: 185.119.88.0/22
IP: 185.241.212.0/22
IP: 2a0c:bf80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:01:a6:95:8d:1b:cf:e7:f2:dd:f2:23:73:6d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fc:30:83:13:59:e4:61:29:e0:70:9b:1e:c7:
20:9d:c6:18:50:3d:9c:b7:b5:9d:a0:55:f2:04:ad:
ca:60:8a:99:2c:04:1d:9e:b4:30:01:fa:90:61:86:
80:ce:ca:61:7c:3b:81:e2:16:71:a5:3a:c7:ba:68:
33:50:38:55:42:ff:75:76:00:b7:10:35:ab:15:56:
3c:79:d3:ea:5a:d6:4d:7b:08:fa:8f:28:2f:ee:5a:
30:74:0c:32:6b:9a:57:d1:b9:60:30:70:d8:61:43:
2f:ae:7a:98:e1:4a:11:d7:a8:87:ce:6c:4b:bf:37:
50:5e:27:38:fe:ad:e5:6d:bb:7d:82:98:02:d4:36:
26:e2:f7:c0:41:95:ac:40:a2:10:e8:bc:f9:e1:9b:
7c:42:c7:1b:b8:69:d4:6d:ae:2f:2a:82:85:f9:ab:
22:6d:d0:3a:8b:d7:d1:d8:bb:4a:06:0e:43:69:1e:
a7:bf:ca:b4:f1:9f:eb:16:33:94:92:2a:57:a4:29:
38:ab:ec:29:13:43:50:a3:21:3f:16:50:1a:4c:df:
81:30:d4:ac:2c:4c:a2:44:3c:c7:2a:46:61:3d:f1:
37:53:fb:69:62:a4:be:e1:94:bc:e5:f4:c2:98:91:
f4:40:54:c7:9f:27:c4:8b:a7:4b:3e:a4:4b:45:35:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/22
185.241.212.0/22
IPv6:
2a0c:bf80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12459
61295
201789
Signature Algorithm: sha256WithRSAEncryption
15:6f:fd:8a:f7:04:86:16:f2:a7:9f:67:59:29:e5:80:90:73:
ea:ec:8b:ac:b0:b7:2a:d0:70:a4:b5:bb:39:49:29:69:c0:65:
f5:be:21:c7:c1:05:55:1d:dd:ed:2b:85:d4:d5:ba:1c:08:a1:
8b:53:92:83:a3:cc:74:da:92:92:58:b0:52:08:6c:02:f4:93:
c2:5c:fe:23:68:04:62:13:f4:f0:33:c6:5d:e3:dd:2c:c5:3c:
1d:8f:fb:52:9b:6b:fe:bc:13:22:b1:2c:e4:c2:b9:56:40:e5:
65:b2:05:23:82:87:f6:ea:93:f8:80:77:47:f8:2a:75:38:4b:
f5:0a:fb:4c:8b:be:08:32:87:97:1a:05:63:30:6c:65:cc:47:
74:46:c6:6a:3f:b6:e7:20:b1:12:63:0f:39:e7:2d:46:a9:66:
15:5d:e1:9f:39:cd:0e:55:6f:39:30:f0:2a:13:ef:93:c4:2d:
4e:af:33:d5:e4:ab:78:2d:2c:15:3c:3e:23:bb:61:4a:ff:26:
3d:be:6e:fa:37:42:59:46:a5:b9:5e:9c:7d:f9:e4:45:e0:e7:
8b:11:d3:72:8f:ac:19:37:be:78:e0:3d:41:23:42:1a:13:b5:
36:30:74:45:00:6c:1a:32:05:00:00:81:b1:4f:7f:21:e8:13:
08:f5:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:11:27 2024 by rpki-client on console-fra.rpki-client.org