Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.cer (raw, json)
Hash identifier: e0dfibWNnI4Lt16QFo0cinDZ3jaswIghc36ywdrDCHU=
Subject key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726DDE10B72954ACEF776B80BCAB7E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39809
IP: 195.170.161.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:dd:e1:0b:72:95:4a:ce:f7:76:b8:0b:ca:b7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:3d:9d:af:ec:26:3f:59:8f:1f:3a:5f:2f:
f8:67:f8:49:8d:30:ab:7f:cb:fc:00:69:7c:2f:99:
d6:e2:af:1f:ef:a5:3b:3e:27:e2:79:d1:e7:97:72:
cc:bc:ce:00:79:f5:14:7e:31:89:d9:cb:1f:40:e3:
73:78:5b:cc:8e:85:87:cd:37:88:e0:7a:dd:23:0f:
cf:0d:9e:7f:52:6b:e8:5c:31:c2:de:67:86:ff:a3:
80:b6:81:66:53:93:55:5a:43:a7:73:a6:9e:99:95:
d1:1e:c4:ae:3c:96:dd:b1:ca:8b:82:18:39:ad:80:
ec:19:83:c7:0c:b6:0f:12:6d:d8:3b:b5:3d:e2:b5:
77:f8:1a:93:84:d7:7e:30:26:2a:5e:f6:09:02:33:
ea:d9:f3:4f:71:f3:22:b0:72:09:a9:10:4e:91:3b:
91:d1:b5:0d:ce:2d:e4:c2:9f:bd:10:29:17:53:a9:
e5:b6:15:6e:d3:c7:c4:77:4e:84:43:5f:2f:aa:f3:
82:e7:4f:73:2c:c7:35:72:2e:a9:36:60:10:9b:48:
d5:a9:cf:af:60:f3:65:30:c5:09:86:02:59:1b:73:
f9:f3:b0:e4:56:13:6a:4a:2f:e1:c6:7c:6a:39:ac:
96:60:c2:e5:b2:0e:8d:9f:38:51:98:ca:c0:a3:a1:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.161.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39809
Signature Algorithm: sha256WithRSAEncryption
42:ed:51:66:0a:1c:78:41:46:e3:45:9b:95:87:dc:80:8e:f4:
3d:bd:f2:03:14:a8:e3:48:31:81:d4:94:19:81:5a:e3:7b:aa:
04:88:cd:32:e8:be:4a:8c:3f:d8:85:71:35:a3:c0:bd:29:5d:
91:a4:8d:3d:b5:69:59:69:ed:13:31:eb:76:a0:25:7a:6b:2e:
95:d5:5a:b9:e5:d1:5a:52:c3:44:ce:24:e0:ec:70:d6:ea:7b:
fc:45:af:80:91:c6:c6:28:04:be:11:45:21:93:b4:bd:7a:32:
bd:c2:1a:1a:0d:45:0e:86:e3:06:de:6d:9c:23:6c:2f:0e:a4:
ac:ac:28:61:be:12:26:0c:d1:4a:f4:0d:04:23:d9:31:c5:4e:
e9:45:35:9a:66:b3:ca:cc:c7:b7:aa:ea:76:25:72:3e:fb:64:
ab:2e:43:00:9b:d0:b0:ad:82:0d:69:35:26:39:b7:1c:7c:4c:
ba:41:e6:32:06:e2:69:a6:fd:8c:24:e0:f3:70:ed:de:ef:7d:
ae:4a:15:a4:84:ba:f4:ab:15:ee:b4:bd:94:48:53:8b:eb:f8:
cb:15:96:ef:1b:2a:1c:95:b2:0e:b8:46:7b:99:1b:62:4a:48:
86:b3:2a:78:b9:34:22:fd:44:fe:36:80:85:79:8c:dd:e1:af:
ac:b5:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:32:46 2024 by rpki-client on console-ams.rpki-client.org