Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
File: hGbpF0La0bn0x5ayOzfres2FgWE.cer (raw, json)
Hash identifier: CVy7efn6fBK58nFFs+vpIiSwrbkYm0vUGnp1Uy7zQCc=
Subject key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424668E8A8C43DB9E96FB4200B6CF7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.198.70.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:8e:8a:8c:43:db:9e:96:fb:42:00:b6:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:b6:5d:10:31:04:2d:5a:c6:b9:7c:91:d3:
86:b3:37:22:13:20:4d:56:6e:bc:8d:78:08:81:0f:
a0:77:3f:3d:f2:d5:27:3b:52:48:21:bb:75:0e:67:
62:09:0c:44:0d:2c:28:32:16:6a:20:c3:6b:0e:fa:
97:5f:55:db:5c:a4:c3:35:cb:78:cc:80:21:de:f0:
ce:4d:86:13:6e:bb:af:ed:03:b6:ec:60:05:a9:f8:
21:c8:b7:e6:4e:73:e3:70:43:73:41:51:1a:ec:64:
89:20:2d:e0:9d:99:aa:fb:f3:46:66:6f:3f:80:60:
ad:26:70:19:ed:8b:61:09:c4:f6:92:cf:65:3b:ac:
39:34:64:8b:30:13:47:d1:9d:ea:4a:2c:ce:3a:90:
95:7e:39:a7:92:0a:b2:33:6a:99:56:a8:a5:08:d1:
e7:8e:c5:0f:bf:ab:5e:dc:67:bb:fe:d7:49:35:e4:
c8:6a:f7:d5:67:0c:6e:4a:27:8c:01:ca:21:92:27:
21:17:8e:41:46:4a:3d:78:25:6c:8f:23:7e:35:0e:
2d:5a:04:c5:a2:fd:7a:a2:ad:73:99:02:06:e6:cb:
ec:14:18:bc:88:64:76:c4:f9:bc:7d:a8:08:69:48:
d5:27:b4:d0:d9:3a:f1:0c:d3:19:6b:4b:8a:af:e2:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:13:93:6a:94:1e:96:ef:8c:5d:6d:65:60:11:2c:fb:28:46:
60:71:ef:c9:33:5d:57:10:ab:b1:49:88:16:0d:da:ed:60:fa:
8f:a2:7b:b3:bb:83:85:75:e5:f2:d9:c6:62:63:a6:f1:b1:e1:
27:d7:e7:bc:5f:05:35:21:4b:c7:5e:46:ba:9f:05:5b:37:f9:
78:60:16:15:7d:6a:c3:d8:cd:8f:98:66:58:1f:c5:59:49:ac:
72:62:72:a6:55:e5:c0:6a:1b:28:dd:92:f8:1f:55:10:43:cb:
96:55:73:19:94:1c:ba:d2:a0:de:54:7c:55:81:c7:3f:7c:6d:
d1:4e:1a:34:ea:77:1b:f2:ed:82:d3:ff:96:08:f2:95:0c:dc:
3e:c0:3f:99:cd:58:6a:9f:27:f1:db:68:af:29:61:23:bf:a4:
84:87:d9:7e:a2:ed:ef:59:95:5c:ea:c0:c5:9d:2b:5c:a8:8b:
47:07:de:2f:66:31:d8:d8:69:49:48:53:17:62:b8:3f:86:73:
c6:28:b1:20:d4:5e:03:30:cf:c2:25:ce:e0:f5:e5:1b:05:72:
96:37:69:eb:fc:66:e1:dd:9c:73:dd:c8:40:09:29:47:1b:ac:
70:48:32:0b:1a:de:b8:9a:f6:55:8a:50:75:51:6a:92:fc:6e:
45:98:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:11:29 2024 by rpki-client on console-fra.rpki-client.org