Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
File: hUyBdtnELHBLMQkTMJRwNRu1meU.cer (raw, json)
Hash identifier: qlejA+d6sSIyu8hLNJDtwswhDn3q+qCq/fCMXW9IOec=
Subject key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7933651FADD19EAB6BB34FA80FE82F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6768
IP: 45.14.108.0/22
IP: 2a01:4a60::/32
IP: 2a0e:c080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:36:51:fa:dd:19:ea:b6:bb:34:fa:80:fe:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854c8176d9c42c704b310913309470351bb599e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:66:63:a1:aa:b5:75:40:e6:7c:4d:32:5d:
ea:de:ba:e5:1a:47:d6:48:fb:86:90:11:1b:0a:2d:
28:6c:b2:2d:fa:42:63:ba:ef:82:fe:45:1a:4f:cf:
d3:39:d7:80:c4:b2:3c:d5:5f:b3:15:13:1c:53:5b:
79:a7:44:41:0c:60:85:06:c6:e3:25:a4:43:5a:02:
d9:e6:0d:a9:57:25:df:43:f4:6c:e3:4f:61:12:a4:
a9:23:e6:06:7a:56:af:5b:40:40:af:ce:a3:a8:bd:
a2:c7:fe:57:11:cd:e1:af:f3:00:66:3d:b5:64:0a:
9a:a3:1d:5e:85:b3:77:f6:6e:e2:d1:6e:de:ad:9d:
2b:0e:a9:67:04:86:e4:d1:f3:b3:62:3a:0f:2f:c1:
5a:c0:5d:b2:c6:6a:0f:9d:f5:54:a7:d2:6f:74:b9:
05:6f:38:fc:af:a2:45:4f:66:18:69:af:9e:7c:f7:
bc:73:d8:3b:aa:98:43:49:bd:2a:8d:b5:52:ce:82:
ae:96:23:7c:89:ed:21:9e:ae:2a:a2:36:a9:3a:72:
5f:02:40:1e:de:24:7f:db:32:36:db:26:52:ad:49:
9c:04:aa:f2:3b:ef:ce:98:78:35:09:d3:e2:f3:9b:
b4:dc:99:4f:18:7c:f5:45:fd:d5:d0:89:38:df:7e:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.108.0/22
IPv6:
2a01:4a60::/32
2a0e:c080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6768
Signature Algorithm: sha256WithRSAEncryption
94:dd:5f:ab:d7:ac:29:7b:2f:30:f2:c6:d9:5f:33:fa:4d:7a:
29:2d:61:42:af:cc:4b:88:d5:93:0a:c8:19:2a:7f:46:7c:be:
73:4a:90:b6:79:95:e5:38:d2:f5:07:ca:83:e2:36:4f:ea:4f:
0f:96:5a:a7:d5:67:76:0f:02:4f:fd:e5:c1:83:15:02:db:c6:
3b:4d:b0:81:ba:1a:06:38:1b:ef:30:5a:9d:c9:91:ca:b8:14:
e7:93:ef:c7:bc:94:af:a2:71:c7:36:d4:73:fc:d4:99:8b:e2:
a6:89:78:47:d9:c6:bf:6c:e0:57:31:31:da:f4:91:26:5b:0b:
f8:f5:51:7e:74:b2:14:67:27:04:31:ab:ed:4a:9c:d5:0a:50:
f6:2f:b9:31:8b:bd:e0:d9:45:2a:00:66:9a:2f:ef:00:a9:c7:
0b:16:01:c4:3b:22:d1:5e:59:bc:80:02:12:d9:5c:e9:59:de:
cb:81:ca:bf:97:1b:91:23:fa:99:bf:13:e3:b2:1b:41:f9:c5:
81:5f:97:1b:5e:ad:05:39:68:5c:52:90:bb:75:8b:9b:64:5c:
18:22:d5:04:ec:c0:8f:e1:fa:dd:75:67:5f:8b:8e:32:7e:36:
88:8c:15:bf:4a:08:9a:e3:e9:ff:9a:ba:c5:90:63:cf:ef:92:
fc:ad:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:20 2024 by rpki-client on console-fra.rpki-client.org