Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
File: hP-lQvPYybB7926uioaYWj17Tcc.cer (raw, json)
Hash identifier: qNGqTODP1bQ78x+4zVQ/yt08UYvfFYHTdjKVECBq97U=
Subject key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF18FA62D95E9A0FC8F7BE12DDF18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207058
IP: 185.167.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:8f:a6:2d:95:e9:a0:fc:8f:7b:e1:2d:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:9e:91:4a:9d:66:e2:bc:63:5a:5c:0d:f1:
b7:d3:68:32:47:c3:7b:b7:f8:1e:7b:cf:63:a0:6b:
73:bf:22:0b:72:87:23:ac:09:2d:fd:79:35:45:97:
e4:4a:96:74:ad:52:96:91:50:9d:be:70:3c:7e:d3:
97:98:d6:b3:53:a1:42:b8:81:f5:00:f3:a7:4e:70:
42:9c:b1:5a:9e:54:5f:81:62:b2:81:ee:5c:8b:f8:
86:59:f1:22:84:18:2d:55:65:1b:aa:29:9b:7c:42:
28:90:6f:34:55:85:8f:ab:a9:63:d4:8c:41:0f:18:
11:c4:0e:fa:5a:93:d9:61:2d:f8:d1:5b:05:21:58:
0c:f1:22:6d:74:59:5e:12:9f:ab:2a:00:e0:15:09:
31:48:c6:80:ae:5c:c9:d6:a4:e8:cf:81:36:43:d5:
6a:db:da:71:dd:aa:d2:64:f1:1d:56:70:d1:a2:9a:
e3:fb:e6:ac:fa:25:92:c3:88:fa:c6:7a:e7:d1:cb:
85:13:a9:11:77:81:df:b8:18:1e:94:3b:75:d8:97:
74:96:de:02:bf:1c:d1:8b:f1:54:1c:d2:01:6a:72:
34:7c:cb:e3:e8:2c:d1:79:4b:9e:62:ed:9e:69:cd:
9e:3e:38:38:e4:1e:a3:9f:dd:d5:57:2d:49:52:8b:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207058
Signature Algorithm: sha256WithRSAEncryption
8e:a9:05:d8:43:4b:cb:cd:66:69:82:4e:67:54:cf:52:d7:e1:
0b:1e:05:07:8f:67:6a:5c:29:dd:aa:97:eb:6e:85:3b:9d:78:
40:14:f4:47:9a:61:c0:73:17:c2:2b:0a:1c:d6:3e:13:2e:4e:
61:ee:9b:f8:d8:aa:a2:87:66:9d:fb:8c:02:e9:69:6b:51:e9:
d5:b0:fc:e8:ef:9d:8d:a5:2a:af:d5:b4:ab:68:14:9f:7a:57:
4b:43:a7:12:ea:0b:f1:74:69:0b:65:69:19:6e:2c:0f:f3:29:
0c:b2:55:c0:dc:3a:10:fb:21:60:9d:68:75:0c:f8:85:c8:fa:
46:ba:8a:5f:d5:21:a5:ed:a7:cf:0a:48:22:39:a1:ae:f0:63:
51:b5:cc:85:8e:63:59:7e:ee:11:80:ed:a3:43:20:a9:68:48:
c9:99:d6:83:74:68:46:a4:f1:65:24:91:eb:bc:cf:7f:36:52:
4b:03:b6:76:4f:3f:90:af:e4:74:02:36:39:a9:cc:06:af:e4:
73:92:5c:5a:16:7f:7a:ec:57:5b:c4:0a:a1:c4:99:eb:a4:8b:
c1:c3:27:12:6e:54:2f:f3:76:4b:43:b2:42:4b:ed:d6:f3:57:
26:8e:23:d2:53:fd:64:08:60:d5:a2:9e:e6:aa:77:02:b5:4c:
af:b2:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:34 2024 by rpki-client on console-ams.rpki-client.org