Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer (raw, json)
Hash identifier: 4DXiT0ouO2/xZYdXgykbkK9a7v827pOvx/hwN/UY3Ug=
Subject key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB93B2D75047EDB3C79A3269385C63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199993
IP: 185.39.208.0/22
IP: 2a04:6d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:93:b2:d7:50:47:ed:b3:c7:9a:32:69:38:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8498f3fefce2fa0120336264df15010461082e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:93:3c:aa:4d:cc:34:1b:b5:be:6f:a7:c0:
73:f7:23:7c:7d:35:d4:b1:ec:36:c4:90:eb:c1:11:
8f:cd:15:43:73:49:84:a4:4d:95:a8:58:cc:26:74:
fb:62:74:48:28:bd:18:b3:fb:68:98:d5:92:86:e9:
69:c5:fb:b7:86:4b:a8:09:a2:46:ac:8e:a0:d4:95:
a8:c3:31:8c:cf:41:70:cc:f0:45:17:ac:73:4e:d2:
d4:17:72:e6:bb:1a:3e:09:1a:75:e0:f4:ab:e5:57:
16:48:a9:af:7f:0a:b4:52:56:34:97:e3:48:3a:a6:
b7:91:8f:48:e9:62:ad:95:d6:e6:28:5d:2b:d4:c2:
fc:00:be:48:3b:07:3a:15:2e:ec:a4:e0:38:e1:a9:
51:b1:d4:e9:cc:d0:33:96:d3:12:c8:86:4d:c1:66:
0a:f8:f2:4a:51:d4:9a:60:de:13:3e:3a:ec:aa:04:
c2:06:c4:b9:c4:54:a1:15:61:c5:05:22:bb:e8:59:
1e:e4:2c:e8:62:e2:b9:d1:2a:7c:ac:55:8c:ef:8c:
c3:43:95:26:b7:a0:cd:69:f8:61:cb:84:47:1b:f7:
20:9f:7d:29:55:f7:2b:fa:b0:87:92:b6:f1:cf:a8:
dc:c9:c1:ba:5f:70:64:86:08:34:52:de:2b:5d:76:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.208.0/22
IPv6:
2a04:6d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199993
Signature Algorithm: sha256WithRSAEncryption
15:f6:9a:69:39:ec:9e:dc:81:e9:31:81:74:ad:44:be:71:4b:
e8:98:a1:35:b3:ce:ef:cc:eb:7d:7e:83:e5:f3:dc:98:5a:b6:
a2:42:69:42:8a:73:a4:42:f7:77:5d:0b:71:b6:d2:98:21:be:
75:4a:5c:9d:19:3a:bb:03:60:3d:12:de:2b:1c:ff:8a:06:f4:
b1:fc:a2:d8:5e:ab:a9:61:80:ef:8a:c9:2f:8d:17:5d:52:d2:
49:b1:38:8c:fe:84:e3:ec:87:6b:0e:c9:8e:14:14:f3:6c:0f:
4e:5b:49:8a:c5:07:8a:29:e6:ff:90:ef:f3:aa:df:c1:92:66:
fb:10:d7:32:f6:61:4b:73:e3:a1:b4:47:7b:97:a2:eb:2a:44:
86:5f:f3:c3:ed:50:3c:e8:dc:b9:68:79:d6:f3:1a:f0:79:b3:
71:7b:b8:43:1d:40:81:eb:32:6f:a5:47:cf:e7:03:64:81:03:
d2:c4:6f:c3:36:6e:e3:f9:6f:38:89:81:fc:38:ba:73:68:37:
98:b1:55:0e:40:5b:9a:2b:e9:00:48:cc:84:c6:a3:00:c7:4b:
15:bc:72:81:ae:3c:24:ab:8b:eb:9a:ca:98:68:5a:b1:a5:42:
f1:2c:bd:fd:78:7c:d8:ed:83:46:a4:57:ca:d8:97:8a:f4:25:
f3:31:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:53 2024 by rpki-client on console-ams.rpki-client.org