Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer (raw, json)
Hash identifier: IsuWnYFIHVkFL/u3+q1/oacivWJN0Wa/przM98ekL/E=
Subject key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488EE6921D4C537F3A7F3278E4AC0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197696
IP: 31.170.8.0/21
IP: 185.236.224.0/22
IP: 2a01:9500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8e:e6:92:1d:4c:53:7f:3a:7f:32:78:e4:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:76:bd:eb:bf:3e:1e:74:cd:12:f6:13:0c:
68:3f:f0:6f:37:bf:b2:97:02:25:dd:86:92:a5:2d:
8f:c0:aa:1d:a4:54:8e:58:e5:72:6f:8b:dc:b2:64:
54:33:22:49:2e:34:84:2d:8c:c7:42:57:c8:11:ed:
eb:3a:b7:89:dc:b2:44:e3:5e:c3:a6:73:1b:9c:26:
f5:6f:f7:26:69:d1:55:15:65:70:a7:07:b6:23:4d:
d5:b7:2e:55:23:88:69:49:8d:6a:e9:82:a4:87:69:
e2:4b:39:8c:ef:72:39:1f:a1:92:a3:80:72:9a:c8:
3b:fb:59:1b:14:e3:2a:c8:3b:e1:87:bf:c2:d2:32:
b6:cd:05:32:3b:db:46:51:3f:aa:ec:79:86:2f:f6:
84:d6:ba:33:08:65:50:49:0b:34:12:df:34:94:b0:
70:74:a5:1f:e8:3e:e1:23:03:d4:3b:42:d7:7c:6e:
a2:1c:8c:f6:e8:60:28:03:16:16:ba:03:70:3f:f0:
67:e2:c6:18:12:14:3c:58:eb:65:02:81:fc:e2:e5:
51:55:2f:3d:65:91:16:4a:33:ef:49:5b:45:b9:f9:
ca:89:24:ec:1c:da:ed:a5:20:e2:df:1a:3e:d3:1a:
62:e5:66:93:57:b9:0a:cd:47:c9:a3:b7:31:e3:a1:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.8.0/21
185.236.224.0/22
IPv6:
2a01:9500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197696
Signature Algorithm: sha256WithRSAEncryption
7b:53:79:2e:ff:0b:4e:15:88:9f:6d:b4:ea:40:1e:17:a8:36:
7b:09:0b:79:35:e5:fb:f9:5f:4d:89:14:4d:b8:33:87:e3:1e:
e9:f5:cd:ef:f3:bf:8b:b5:a3:d9:61:c7:78:ef:75:7e:12:dd:
db:3c:f7:31:79:75:3c:3a:3c:23:59:7f:42:87:c1:c6:3f:33:
4b:4e:7b:29:f5:02:ba:61:6a:ef:c3:a5:c7:d2:30:6e:eb:bd:
24:a7:fe:77:91:01:d6:7e:0f:2f:67:88:20:6f:7c:e4:42:d5:
98:07:7c:e6:be:fe:95:74:a6:93:32:c2:11:fc:51:a8:ea:a8:
f2:41:ad:24:0d:54:ed:b5:a5:fb:26:59:bf:a5:21:0e:3d:2a:
9f:43:55:72:0b:4b:82:ba:a8:d2:c3:83:4e:ce:34:70:46:20:
3c:69:86:82:94:42:5d:54:e6:50:b1:22:09:f7:6f:f3:d0:c8:
e6:56:56:20:bd:5d:2b:92:a6:d5:b8:c1:dd:07:b2:04:d6:4e:
9a:98:16:09:e3:86:af:79:12:4f:3d:00:32:48:c4:5d:6d:30:
18:57:02:f3:d0:a1:b8:5c:bb:4a:98:1b:2b:c4:8e:34:77:21:
62:31:0f:c4:39:69:f3:12:70:78:7f:96:f6:bf:20:a5:fc:1d:
02:f2:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:52:13 2024 by rpki-client on console-fra.rpki-client.org