Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer (raw, json)
Hash identifier: 2eaNX/DUp6yobSRe9ZikCJkpYsQQ923oIY5ZJcALriI=
Subject key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34911CB0205228E136998FA939EC914
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 137.56.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:11:cb:02:05:22:8e:13:69:98:fa:93:9e:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854e8383e8208936802362a09f36085a50fcd85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:28:29:3c:85:4d:98:94:bb:bc:df:03:4d:
a6:5e:a1:30:0a:0b:5f:b9:93:6a:d5:8b:d8:43:71:
ef:95:b9:89:df:04:ab:f7:f7:26:c8:7b:0a:ed:d9:
ab:04:d0:80:41:5c:cf:fa:75:2b:54:71:1f:ee:75:
e9:de:3f:0c:2c:7a:b6:9d:70:2b:da:88:22:ac:14:
96:77:fb:af:09:2a:7e:c9:70:93:66:19:5f:05:62:
01:61:f1:22:1f:21:ed:00:6f:59:3e:49:94:5f:12:
a0:1b:00:1b:26:3b:c8:92:9c:68:a1:57:9d:9f:fa:
3e:dc:64:54:b7:63:42:34:84:3b:e9:f8:91:ab:03:
1a:7f:85:6b:0c:4e:7b:64:b5:93:14:29:44:1b:77:
82:c2:c3:97:6a:2e:51:37:9c:6b:ac:d0:3d:c4:43:
76:a2:f7:0e:f2:82:88:0d:d2:41:55:69:97:a6:04:
04:1c:0c:4c:8f:f7:b3:47:2e:63:52:3f:c3:b1:bc:
d5:ac:f9:b4:53:48:7b:9b:2e:64:95:27:9c:39:93:
f8:00:09:14:e1:42:02:42:9f:2f:61:6f:da:f0:94:
5a:9e:bd:47:b9:6d:6e:3a:fa:dc:1c:59:0e:6a:c9:
85:15:1e:4e:47:77:75:9a:1b:b9:24:ed:5e:2e:a4:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:2f:11:7a:98:ac:9e:b7:80:c6:3e:0a:d4:8b:52:9b:94:28:
b9:ef:b4:59:8b:fa:d2:38:9d:e2:40:8c:c9:68:44:dd:02:1d:
c0:b7:15:b2:0a:da:96:6d:51:56:d6:5d:c9:45:77:b5:13:cf:
9a:dc:c6:98:0b:74:44:a5:a9:ae:db:d3:59:46:17:6a:b9:ab:
44:c1:ea:e3:31:25:ff:41:91:54:58:9c:0e:42:42:d7:67:4b:
fe:a4:8e:72:f7:bd:2d:77:b2:70:81:e4:44:8b:6d:57:bb:cf:
10:ef:81:0f:d8:4a:59:62:5d:b3:b3:92:b2:c7:d8:a6:9e:94:
e8:31:74:ae:ad:06:d6:63:b5:ab:24:8d:21:2f:0f:07:17:c5:
5c:ec:0d:a9:97:7b:dc:bf:01:56:ae:ea:4b:75:08:df:d1:3d:
34:04:8c:f0:8c:d2:84:d1:a0:c3:06:d2:c6:2d:64:92:66:52:
54:28:61:70:37:a3:7b:52:8e:8a:49:19:de:19:5a:8f:b9:e8:
ff:84:f0:9d:f1:04:b2:f8:ce:5c:40:63:d9:4f:04:69:b7:9e:
2a:80:98:dc:01:e5:21:33:09:1e:bf:8d:88:9b:e4:15:47:2f:
1e:1d:53:9b:e8:8f:44:94:ed:99:9b:c4:7f:d0:60:e1:7b:80:
bf:45:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:04 2024 by rpki-client on console-ams.rpki-client.org