Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.cer (raw, json)
Hash identifier: xv/T/os9GZchRQRkZnF+vVr4OayKCbRfKVUOqSTa6Yo=
Subject key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FABA7BDE4B9C3191066FA5B8ECFEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42061
IP: 195.8.212.0/23
IP: 195.60.92.64/26
IP: 2001:67c:1d0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ab:a7:bd:e4:b9:c3:19:10:66:fa:5b:8e:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:13:0c:6e:7c:24:12:91:1d:0b:27:0c:dc:
8a:dc:bd:9b:81:ba:1b:bd:84:22:b4:c4:e4:b5:43:
27:3a:c1:b6:c7:ac:4e:18:92:e5:fe:b0:6f:7e:d4:
97:85:5e:dd:aa:0c:2f:29:d1:c1:05:21:85:55:f3:
63:d1:ab:bc:08:a3:f1:87:ad:88:df:bd:08:29:b5:
86:8b:43:5d:20:1d:b3:64:bd:5d:02:b0:5c:ca:f1:
0a:0f:73:e2:c0:32:8e:fa:66:e2:6b:bc:ba:8e:75:
65:79:5d:36:47:5a:bd:72:a3:91:6c:f2:62:19:a3:
0b:c1:e3:f8:21:99:1b:9c:ec:ce:29:b7:77:a9:de:
18:fb:d1:ee:99:6c:74:06:96:53:bd:1f:88:3e:31:
b7:e4:16:2b:8c:06:4c:df:c0:76:52:d5:cb:f6:43:
07:0f:04:1c:73:9c:12:4e:5c:2b:9e:96:d8:f4:b5:
ce:2f:04:f5:09:aa:7e:ea:81:f9:9e:c3:ac:8b:f1:
9a:55:bd:a6:19:f3:4b:3d:eb:24:b5:93:3e:e7:8d:
08:6d:d8:25:39:4e:79:42:b2:4f:c5:03:a6:ec:82:
aa:bf:98:18:e5:f6:9f:8b:5c:cd:c6:d7:05:98:33:
20:7f:10:74:67:4e:b8:a8:64:9d:e9:cf:23:83:46:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.212.0/23
195.60.92.64/26
IPv6:
2001:67c:1d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42061
Signature Algorithm: sha256WithRSAEncryption
a5:e8:d7:45:c3:50:9d:36:05:12:ce:5b:ed:10:2f:d1:81:e7:
bb:a3:bc:3d:d8:d1:ac:bc:d2:99:e9:ab:4a:30:51:ea:52:6f:
c9:aa:94:63:b8:1c:c9:cf:5a:3e:85:45:92:b6:c4:9c:c3:c3:
1a:6e:38:8c:29:43:5f:07:17:c9:76:f1:f1:20:64:d4:89:8c:
7f:f2:54:45:cc:7a:b6:4a:cc:c4:3c:ed:c8:58:5e:16:85:77:
39:88:e5:da:05:40:38:11:e7:10:6a:76:ba:92:bb:04:d1:ed:
2c:a5:88:57:da:e4:4c:6b:36:2f:cb:f9:03:9d:55:af:e7:62:
2e:e7:5e:89:9e:7c:c3:19:5e:5c:74:54:ef:21:e8:9b:ff:1d:
4e:b7:c2:b0:b3:29:6c:32:8f:1e:b3:5a:28:ac:a8:64:5f:4e:
0b:2e:80:4a:e3:d2:c0:48:a8:47:23:34:90:41:08:e0:76:57:
36:ae:5b:dc:e9:6c:83:b9:c2:78:88:61:11:7e:0e:09:36:5f:
b6:d4:97:c4:d0:89:6b:25:fa:fd:7d:43:18:da:82:20:4a:a5:
2b:e5:1e:21:6d:d3:4d:60:0b:b8:f4:73:db:eb:20:a5:91:c5:
2d:ff:e4:a1:5f:db:7b:44:05:cd:d5:ef:bc:df:4c:65:57:49:
83:b3:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:54:40 2024 by rpki-client on console-fra.rpki-client.org