Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer (raw, json)
Hash identifier: zZFt67mI55qSW14L9qqELomnGCRIDL05QjX6bsPnNOs=
Subject key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA98F78D5758FA3D9997BD6229AC979B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50297
IP: 46.148.16.0/20
IP: 193.106.28.0/22
IP: 2001:67c:28f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:f7:8d:57:58:fa:3d:99:97:bd:62:29:ac:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:27:02:b8:79:80:31:9a:5f:5e:a9:db:b3:
2c:e5:e4:e5:cc:9c:47:bc:f2:bb:e3:77:15:fa:ea:
bb:6c:ee:d6:9b:a8:9c:02:80:13:d7:07:fc:fe:64:
3b:78:16:cf:85:0e:9f:1d:b8:cb:48:c6:db:e0:8a:
f4:1d:4d:5c:dc:11:b6:9f:bb:f9:a6:d3:ef:3a:91:
26:0c:5e:5a:40:17:0f:fe:44:48:14:7e:fb:95:a7:
b8:1a:d0:3b:aa:0c:3f:0f:b1:93:d1:ce:70:ef:c7:
67:b4:64:52:ac:89:bc:cb:2b:c0:30:04:a8:f6:6f:
2c:9f:0c:b7:61:d0:b4:a6:f0:fa:56:8d:b4:81:a9:
89:52:78:17:cc:c8:cb:ab:b5:65:dc:db:cb:b1:45:
36:90:7c:64:11:be:04:cc:3c:57:3a:01:f3:65:67:
e0:4c:f4:0f:b9:2a:5a:b3:41:e3:d9:53:89:3a:e4:
af:13:16:26:2a:b8:15:69:ea:77:fe:5d:2f:ca:7f:
24:2b:f8:1d:8b:6f:75:bb:35:63:67:43:ab:f4:fd:
ce:ac:d4:fb:df:a0:df:62:d3:26:3b:00:84:a1:f9:
3b:a6:82:33:80:2f:28:98:c2:7b:45:62:b8:b4:3d:
90:ab:bb:8a:10:d9:03:71:e4:cd:09:d8:d6:c0:c8:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.16.0/20
193.106.28.0/22
IPv6:
2001:67c:28f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50297
Signature Algorithm: sha256WithRSAEncryption
7b:11:f6:9e:cd:03:43:f1:c1:1d:37:35:18:d4:db:08:40:a9:
7a:e8:80:3b:b3:97:7d:62:d7:32:5b:1a:cb:0b:7e:cd:e1:e5:
b1:d7:9f:27:d1:6d:13:48:40:da:57:c5:cb:43:ed:b0:9a:3d:
62:22:12:f2:36:18:93:43:12:b7:56:28:63:67:be:90:7c:ee:
0d:f5:38:05:65:04:7f:fc:6c:75:cc:99:bc:45:fa:be:be:e7:
72:ec:e8:00:9c:ba:09:57:80:1a:77:fc:e9:ea:90:17:12:0b:
d6:2a:96:5e:01:ed:53:80:84:f3:de:c9:cf:66:1f:6b:09:4f:
92:9d:d0:ae:4a:10:f8:27:aa:d8:11:36:7d:2b:10:9c:cc:e2:
5b:89:84:4d:42:b4:9a:2e:3c:70:84:ef:bd:be:04:15:bc:62:
8b:78:7d:22:49:c8:9d:a5:d5:d6:87:f5:29:1f:52:62:08:4a:
01:f1:b8:d5:65:61:0d:e7:1b:3d:e4:6f:d4:f4:95:3e:c1:4c:
f2:9f:75:e4:0b:cb:6b:fd:df:0f:c2:4f:d7:9d:7c:5a:b4:35:
7f:df:b7:92:4e:89:ce:d7:6b:f5:6b:94:fb:21:a2:c8:6c:1c:
b9:e1:54:f6:ff:fe:c8:55:26:1d:b3:51:79:ef:4d:45:3e:fd:
d2:52:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:32:35 2024 by rpki-client on console-ams.rpki-client.org