Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer (raw, json)
Hash identifier: 5ecIJv5kuU8W1Vsc+M/bQjMNozpiIQDgGqJY8qTMdY0=
Subject key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348BF8CE9371F81070DAB8EA436AC96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41978
IP: 194.35.74.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:8c:e9:37:1f:81:07:0d:ab:8e:a4:36:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:d1:de:6f:63:62:39:7e:a2:83:e4:df:e1:
1d:c5:cc:39:47:4d:4c:59:3d:6a:1f:f3:4a:f1:8b:
6f:f8:84:ab:c4:ef:12:b8:c8:f7:3f:62:d9:63:da:
a7:c0:96:2d:05:48:b2:38:8a:08:d4:cc:1c:82:1f:
c8:8d:e7:42:e1:db:fc:be:8a:a4:d6:c7:32:1c:aa:
ba:03:30:e0:37:69:81:bf:d7:19:1b:69:e5:8d:fe:
e7:cf:c2:7b:44:2f:3d:02:0a:e8:2a:fa:51:67:c5:
f1:f6:b2:e4:fa:46:69:e4:4e:a4:69:1c:9b:44:a7:
e5:3f:a3:29:0d:75:74:85:56:77:e9:8b:17:e3:2c:
dd:03:78:97:34:0d:a0:17:df:c1:f6:fc:b9:da:af:
a4:c6:ce:6b:da:83:33:63:1a:ca:0b:d3:28:fc:1a:
98:d5:11:c2:5e:06:24:78:dc:77:9f:86:9a:7d:10:
7f:08:95:cf:70:3f:91:fd:0f:60:41:e4:9b:ff:7a:
c8:4b:68:5a:32:b9:1e:2a:e2:a9:93:a1:53:13:45:
dc:45:a3:ff:39:bc:0e:57:86:59:a2:33:15:98:6b:
9b:94:bd:b0:5e:ad:c0:1c:e0:0c:66:59:62:65:2a:
84:e5:93:40:9c:3c:fa:86:13:db:75:51:f0:b2:10:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.74.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41978
Signature Algorithm: sha256WithRSAEncryption
01:20:b9:38:cc:08:fb:98:d9:01:dd:f0:b6:e0:df:34:af:29:
bd:7d:47:63:07:d5:a4:37:aa:45:c6:84:58:bd:76:a1:cb:54:
15:b2:25:86:bb:19:aa:53:e7:44:d5:6d:b8:6e:7e:87:cc:60:
44:82:8b:d7:13:67:b4:d2:14:16:69:1c:31:34:bc:00:6e:6e:
cc:8c:05:5e:d0:60:0d:5d:bf:26:c7:81:5f:fb:6c:a1:4f:aa:
9d:a7:cd:36:a7:d8:a5:0b:7d:9f:7c:94:47:fd:59:57:4f:b2:
c4:ee:b7:bf:85:d5:be:95:3d:55:c2:65:2f:14:e7:de:4f:52:
2d:69:e1:03:0a:61:13:de:ed:ea:3c:c2:71:b7:74:de:4c:1f:
7b:c8:cb:2c:ce:bf:1a:bb:90:69:1b:ad:6b:2e:b9:78:5e:08:
33:27:90:49:6e:cf:5c:29:4c:a2:a8:1b:35:28:9c:40:ca:66:
96:eb:8f:16:d6:a3:a0:51:2c:a3:87:6f:95:42:64:6c:46:74:
92:99:42:16:68:6c:c0:8b:90:07:e0:3e:32:34:64:25:2b:5c:
b5:d5:cd:f6:3b:c7:2c:97:e2:87:6d:c9:11:52:9a:13:de:67:
ea:77:a8:54:33:31:34:20:ab:e3:c5:02:58:1e:33:75:25:4b:
20:81:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:52:33 2024 by rpki-client on console-fra.rpki-client.org