Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
File: hRJy5OgYa5zz0etCZlxTznFPTUs.cer (raw, json)
Hash identifier: XY7xiEaHT1RSBQILYmdBboRl7iRjfVEv3yxVx1d0M3s=
Subject key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B779D0402CA7FDC07C62BB030F19C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.190.8.0/24
IP: 2001:67c:2ae4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:d0:40:2c:a7:fd:c0:7c:62:bb:03:0f:19:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:85:b9:c0:80:d5:f8:da:ca:99:a7:20:d4:
27:34:21:3a:06:b9:d8:96:41:08:92:66:02:7b:32:
ce:be:a3:f6:9e:dc:74:55:0d:4d:41:e5:7f:b2:e1:
9a:04:0f:ef:c6:52:ee:e6:e9:0c:88:d0:85:86:e6:
0d:f4:b5:c9:5e:3e:8e:23:b1:41:6e:6d:ed:40:15:
65:a2:9b:b6:95:33:c5:58:00:66:a0:77:70:73:28:
8f:1c:07:05:58:a2:25:55:46:45:b0:4e:75:6c:01:
29:b8:ac:ab:c6:7c:1a:6a:0a:72:c5:b5:ae:cb:fa:
59:9d:d6:8d:eb:93:6e:4a:1d:1f:d8:f1:05:bf:f2:
bd:0b:cc:5d:18:b4:9d:cf:05:89:aa:a8:f0:0c:dc:
59:81:8b:cd:a1:5b:c3:07:f2:31:23:3a:4e:39:c6:
fb:f9:6c:68:f7:dc:b4:32:bb:76:18:8a:cb:ee:84:
3c:60:10:29:aa:a2:17:df:da:bd:78:6b:d1:73:fb:
b9:bd:b3:4b:f3:98:6f:50:f9:5e:b7:cc:7d:35:96:
2d:dc:31:fd:fc:41:a3:f2:80:7e:37:60:9e:c4:1c:
34:f6:31:81:d7:d1:ca:1f:a6:6d:0d:d7:bc:57:fc:
2c:f5:79:13:07:df:a3:24:10:a6:b8:0e:bd:cd:cb:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.8.0/24
IPv6:
2001:67c:2ae4::/48
Signature Algorithm: sha256WithRSAEncryption
3e:87:70:54:9d:ee:c9:b4:f3:ca:f4:a5:53:88:5e:95:70:c7:
26:dd:d6:3d:60:95:99:7b:a7:54:5a:ec:db:50:49:7f:88:ca:
68:5e:cc:46:be:48:97:61:ef:fb:76:c1:38:91:9b:7b:ea:3b:
11:0e:67:c8:b5:66:f9:78:59:30:7c:8f:97:99:17:3b:cb:39:
d7:27:7c:56:eb:25:71:27:7a:9b:13:d2:5c:a0:59:90:e8:a3:
8f:5d:46:55:3c:cb:b2:77:23:e1:ce:b9:55:be:26:93:21:10:
19:96:13:e6:da:4e:02:86:02:7d:42:6c:3f:57:8c:fa:11:9c:
2b:00:87:05:50:12:18:25:a3:0b:2d:66:07:b2:3d:e4:3c:ad:
50:a5:a4:42:35:22:de:fb:45:04:d2:0c:1b:09:e1:9b:e0:fa:
f9:b8:2d:fc:d7:54:8b:20:8a:f0:5d:37:4f:4b:10:b0:40:c3:
80:9c:0b:e6:39:91:76:01:27:0b:fd:5c:11:15:db:c4:8e:3a:
5c:e7:67:38:a2:0d:9c:af:ce:b7:2b:3e:fd:86:bf:e3:53:43:
5e:40:7b:d4:db:01:30:3a:99:67:39:b7:27:c3:8e:d0:6c:da:
88:86:ce:5d:61:87:c8:8b:6a:0d:17:d5:fe:54:cf:25:87:26:
c1:3f:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:44:10 2024 by rpki-client on console-fra.rpki-client.org