Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer (raw, json)
Hash identifier: z7LmPrKmNQmZX5pZduaj+mQ8jIrX5QP6csmb4IqDdtE=
Subject key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBB2D3E5C2FF7687EEC54287592F1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56979
IP: 83.136.52.0/22
IP: 2a05:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b2:d3:e5:c2:ff:76:87:ee:c5:42:87:59:2f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:29:e6:d0:da:de:cc:1d:1e:74:6d:89:21:
a2:6e:b5:3e:d1:b5:ea:ad:95:66:47:27:ec:07:3b:
71:5c:e0:33:c4:8c:99:26:56:68:a1:e7:ed:bc:a7:
ed:b3:c0:50:4f:6a:2c:56:ab:73:e6:fd:6e:eb:10:
ef:46:57:ad:af:32:6b:b0:16:b8:41:87:b5:d3:34:
1f:a3:8e:2d:79:8f:93:4f:77:80:dd:9f:22:88:32:
88:e7:ca:a7:c0:38:dd:ac:44:f5:e0:ff:f1:e8:69:
b9:ce:7e:64:9c:44:3e:74:e4:61:56:0b:4d:49:2d:
e8:78:11:5f:10:da:23:5b:03:a9:17:42:2e:f4:47:
01:28:08:d9:01:b7:05:1d:58:ff:6c:39:09:2d:ee:
b1:b1:8c:de:5e:b1:4d:f5:3a:6b:43:81:5a:70:24:
65:3b:10:2c:97:c4:37:72:02:f3:af:4d:73:e8:58:
fc:22:60:f0:93:b8:34:a0:40:5e:f6:2a:5b:6e:eb:
a2:aa:d4:6f:18:9e:18:7b:7b:a1:97:81:36:76:d9:
7d:b0:cf:dc:e9:33:84:cb:f6:4c:11:6c:25:a5:51:
ae:2d:0c:b6:5a:e9:f6:2a:17:42:5f:75:c5:49:0c:
88:5b:f5:37:32:74:71:e6:0c:c3:c9:16:d2:03:cb:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.52.0/22
IPv6:
2a05:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56979
Signature Algorithm: sha256WithRSAEncryption
02:93:9f:21:62:4a:9d:dd:51:94:36:74:59:9a:92:1e:e9:f4:
f6:fb:41:e7:90:ed:d1:c7:10:ef:ba:c6:b9:1e:0c:4f:3e:a6:
29:9c:b0:74:c5:56:32:9f:14:0a:4f:ff:ac:6f:8e:07:11:20:
32:40:85:cc:18:64:cc:9c:6a:85:67:3b:f9:e9:a4:9c:27:6c:
e5:51:bd:f0:7f:7e:f0:6a:0d:6f:2b:40:d2:9d:d0:c9:10:ba:
90:5f:8e:31:94:7c:fe:a0:71:8f:49:ba:23:2c:b1:be:6d:cc:
45:d5:16:3a:39:85:5b:9e:44:1e:cd:92:06:93:d3:87:fb:16:
fa:47:2b:bc:27:24:3b:de:f7:8c:7a:81:2c:8f:43:04:a5:a5:
1b:82:46:57:81:ce:c6:df:2a:b9:43:88:6c:4a:93:97:38:50:
b1:08:2e:f9:4a:01:7d:44:c6:94:3a:49:1d:a2:1a:61:9f:40:
30:a6:10:be:87:6b:a1:3b:64:79:37:2a:7a:01:4f:eb:2b:df:
27:71:e9:fb:a9:23:42:81:48:ef:ed:ef:bf:03:98:84:aa:37:
96:f0:5d:e6:2b:dc:5f:c8:50:05:28:8f:f9:34:67:7f:4b:8a:
e9:87:17:e8:e3:d4:c4:7e:19:93:0c:a2:6b:e2:ce:8e:78:33:
2b:f6:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:11:51 2024 by rpki-client on console-fra.rpki-client.org