Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer (raw, json)
Hash identifier: 0gXUDS0GCDYSio1PeJs+5uY3ou5h2u+8ZYbnl72f1NI=
Subject key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DA54BFF0EDAAEA237B363C01BAD20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.143.16.0/21
IP: 195.140.140.0/22
IP: 195.242.191.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a5:4b:ff:0e:da:ae:a2:37:b3:63:c0:1b:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:df:1e:0c:a5:8e:c6:fa:ab:b4:35:c1:45:
05:d9:16:73:9e:49:cf:a9:fa:9c:55:c4:9b:18:ec:
aa:23:26:fe:7f:af:08:b8:6a:c9:e6:5d:8f:80:76:
fa:88:ca:c0:d4:25:ab:f1:02:d9:cf:30:06:07:0d:
2a:7d:d7:49:b8:8e:35:81:0a:e6:bb:4c:a4:7a:3a:
ff:d3:c3:dd:b4:b4:a6:e3:ea:90:70:07:4c:99:05:
b3:31:92:3e:ab:4e:0d:e7:55:51:7c:36:cb:01:f9:
04:ce:cc:84:ae:b3:05:6d:ba:87:71:55:ea:65:30:
7c:0e:c2:43:72:d5:97:bb:96:b6:44:d4:d2:e0:53:
14:69:39:7a:a4:eb:44:63:15:35:5d:37:e3:83:38:
2e:0f:8e:99:a0:75:28:25:06:22:d7:8f:1f:8b:f0:
2d:a7:a3:1b:a7:9d:36:f3:ff:0e:f6:7f:19:b7:3d:
59:94:a6:16:c9:61:37:63:f1:e7:49:5b:dc:20:14:
40:be:7e:57:d7:f2:3d:59:cc:96:84:4f:3f:13:7c:
b3:35:7f:01:c2:fc:5f:5a:5c:04:82:15:4e:b8:db:
7f:4d:3d:f8:6f:d8:31:b1:a4:3c:74:49:a5:db:c3:
ae:ca:c5:1a:0c:e2:2b:f3:75:c5:b2:32:00:9d:e7:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.16.0/21
195.140.140.0/22
195.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e1:3c:0f:f2:51:9d:23:52:51:3e:92:a0:18:99:38:f4:bd:
cd:37:a9:ba:1b:67:ec:a3:0a:f0:32:1b:cb:10:40:ad:df:3a:
6a:b7:18:f2:8e:f9:41:10:0f:3c:de:b9:e6:4f:1e:4e:a8:ef:
fd:38:0c:80:38:bf:16:b2:fe:0e:90:81:11:f8:5f:6f:de:ad:
b3:28:ea:76:2f:b6:e7:91:0b:db:ec:10:a6:b2:00:4b:94:d4:
73:4e:df:dc:0e:08:51:46:8b:24:85:20:30:a1:99:b9:da:11:
f6:e8:58:8f:3c:67:95:d6:f0:d0:4c:ab:c6:10:4c:fa:ca:44:
58:06:0d:bb:f8:b0:18:67:1e:ce:57:ac:25:9b:6f:94:76:4c:
13:fe:71:fd:af:6c:03:bf:8a:79:fe:21:b8:13:6f:46:ef:13:
9d:66:86:ac:ec:e2:84:ca:7f:30:4c:0b:f6:af:fc:09:32:fd:
c7:67:77:e2:a4:fb:0a:e9:29:ca:2d:ed:80:34:b4:b8:c2:b6:
d7:68:dd:90:37:2c:4f:d1:c7:bf:a6:0b:cd:f1:51:36:61:d1:
51:65:19:50:6b:b2:ae:93:fc:b3:20:08:11:7a:24:51:cd:c0:
00:97:f3:64:01:8c:33:5c:f4:84:bb:23:10:49:ee:8a:48:40:
4b:02:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:05 2024 by rpki-client on console-ams.rpki-client.org