Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer (raw, json)
Hash identifier: mRhcpOJcgXgb8dCLPKx+9GRXOPmQmDTribAven3UVt8=
Subject key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A7337788EEFFEC64C2E634B582BD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210964
IP: 194.150.78.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:73:37:78:8e:ef:fe:c6:4c:2e:63:4b:58:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:bc:69:2f:95:fe:50:9c:21:16:48:85:60:
e3:8e:6a:aa:06:cf:f1:5c:aa:8c:1d:4c:d2:35:4d:
e2:86:86:4b:d0:3d:2b:44:71:19:55:f8:c0:ae:c9:
87:af:df:d8:45:29:16:e4:c8:92:07:18:d9:ed:88:
77:ac:b0:b0:f5:4b:dc:f0:39:47:b5:ec:6f:75:ee:
c9:af:52:2c:a2:4e:9a:68:fa:a4:93:e8:02:0e:5a:
fc:46:a2:93:fa:11:3b:a1:bc:96:af:c7:9b:53:3b:
07:62:f8:73:5e:a2:38:93:9a:a0:a1:a8:19:a6:b3:
12:a8:07:19:8e:ce:97:17:ae:2c:24:22:2c:a4:dc:
a7:00:32:62:70:b6:9e:b4:84:2e:65:30:cc:79:e1:
e5:cd:fd:bf:31:72:33:35:5b:93:c0:22:09:c2:03:
4a:2d:6e:4f:49:43:2e:76:80:3a:7e:1e:ae:d5:b4:
a7:58:81:b1:64:74:f2:61:71:a4:29:c7:54:c7:70:
a6:e7:4b:ec:6b:aa:c9:c2:72:ef:9d:b9:27:0d:66:
8d:0c:73:1b:b8:9f:58:ea:37:60:a0:0f:5d:9f:88:
67:53:1b:cc:81:e1:d2:c7:67:20:a4:bb:36:e7:ad:
75:e5:61:e4:bb:a5:a9:6e:fb:06:0d:83:56:e8:5b:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.78.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210964
Signature Algorithm: sha256WithRSAEncryption
67:70:87:b3:f5:ce:41:2f:36:21:2e:e1:55:84:4a:83:49:1d:
a4:25:32:c7:18:fe:30:90:68:0c:2b:67:9a:06:73:76:1a:3b:
8e:8f:c9:f4:c4:8c:7b:91:af:cc:38:90:b0:6f:ab:67:5d:10:
39:02:2a:a9:48:c1:91:5b:1d:34:43:71:35:c3:75:07:35:c2:
69:ba:14:05:da:f5:b3:11:a7:87:e0:af:a4:10:c5:6c:36:74:
26:9c:4d:4e:b8:d3:1f:fb:57:e3:4e:9f:d5:f6:34:7e:4f:12:
e7:f6:5b:fe:41:29:2f:84:df:5d:6c:e3:20:4d:f9:d6:b9:7e:
6d:9e:15:87:56:e9:ef:a9:f1:02:2b:b3:42:9b:a1:66:7c:68:
5d:63:29:d0:2a:1c:2d:69:f3:8a:e9:c4:75:ab:3e:fa:75:79:
ed:6b:da:d1:b4:78:06:09:c0:a8:84:f6:c2:2c:45:89:46:14:
92:40:01:b8:df:af:c3:96:7b:4d:f3:f9:02:b7:9e:22:10:87:
f9:50:05:c6:d3:28:42:7f:57:91:ac:96:34:a7:a2:7a:99:33:
b4:9e:5e:5d:b2:e8:20:88:2e:25:de:44:ac:0e:d4:3b:c4:64:
b2:11:6f:cd:0a:08:12:0f:8d:96:06:4f:95:2d:58:ee:c8:54:
b0:d4:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:53 2024 by rpki-client on console-fra.rpki-client.org