Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer (raw, json)
Hash identifier: r7Jlw2p3n8AWimHOxCxnN/wLeuufIIYFkhNrDdpnFgs=
Subject key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA298D5B5AA9E0F2DA64E5CF6983C4F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209181
AS: 213051
IP: 2.58.192.0/22
IP: 79.143.16.0 -- 79.143.18.255
IP: 89.46.123.0/24
IP: 128.0.38.0/23
IP: 185.252.0.0/22
IP: 193.109.108.0/22
IP: 2a09:e9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:8d:5b:5a:a9:e0:f2:da:64:e5:cf:69:83:c4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:6c:bb:5c:4f:f8:f3:19:da:cf:a1:3c:07:
e7:04:54:09:cb:27:9f:df:47:cb:8c:cb:84:2d:a0:
7b:65:44:0a:42:8c:d1:93:09:06:06:0f:31:59:8b:
11:bd:92:b2:d2:b9:c5:3a:70:1c:9f:6a:dc:c5:af:
18:03:ae:1c:bf:30:e9:99:1d:8f:30:fd:20:aa:71:
67:29:59:d7:26:f1:84:b4:4d:d1:ae:4c:bd:09:b8:
e3:d3:e2:21:4d:e3:67:5a:80:f1:bc:5f:f7:82:a8:
6e:3e:af:44:a2:c0:54:b3:1f:48:85:1d:06:3a:07:
db:17:58:c5:81:09:da:04:e3:b7:8c:a4:d3:60:6f:
d8:1d:2f:4d:b3:b7:d9:34:70:f2:67:3f:38:08:52:
62:95:2f:55:6d:f2:9d:70:4e:73:76:4b:8e:d5:75:
27:35:66:77:ac:3c:30:14:77:99:2d:ed:09:bf:50:
50:a9:c5:a1:b2:82:e9:83:3b:6e:79:65:8d:a9:4d:
5f:64:5b:d7:00:c9:99:ac:a1:46:f2:01:e1:01:54:
bb:2d:3a:13:0c:65:e0:39:24:94:94:d0:63:38:05:
bf:e9:e8:ac:a0:6e:a6:14:7d:85:36:83:01:76:af:
fd:7c:16:71:e9:26:0f:52:a4:c4:0c:6a:5e:d6:b8:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.192.0/22
79.143.16.0-79.143.18.255
89.46.123.0/24
128.0.38.0/23
185.252.0.0/22
193.109.108.0/22
IPv6:
2a09:e9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209181
213051
Signature Algorithm: sha256WithRSAEncryption
6c:24:a6:db:14:10:39:97:e9:1a:c6:bb:76:c3:a5:8f:85:b4:
ab:1d:47:19:04:d0:75:db:a0:eb:95:a0:e9:8d:1f:dc:58:82:
2c:ce:a3:cf:c4:eb:80:2d:95:21:7d:56:ba:f7:fd:93:45:c3:
34:94:43:cb:bc:3d:2d:c1:58:70:17:ad:eb:d3:c0:46:ef:c7:
de:17:7b:8f:77:e6:20:55:eb:9d:4a:67:4e:e7:84:95:08:36:
5c:fb:70:92:6d:fd:04:57:6a:65:4d:b8:af:e5:ea:46:08:96:
6b:c5:c9:97:08:03:8c:a0:55:7d:f5:c6:85:b1:7e:ed:a8:cf:
21:ea:04:51:98:27:11:2c:79:d3:4c:8a:0f:1e:cd:55:13:55:
62:9e:94:67:91:44:9f:96:43:56:b6:da:8d:69:ad:56:ec:77:
38:03:6a:8f:97:a0:bf:8d:b3:c7:2f:cf:be:fd:68:aa:67:e5:
18:cd:53:84:2d:17:1a:49:dd:5b:74:a1:23:aa:81:bc:af:eb:
9a:b7:c3:0f:ee:d0:36:32:e4:6f:ae:3c:5f:55:11:4f:f3:ec:
89:15:0a:b9:43:3c:b7:d0:89:67:0d:11:81:6f:47:a9:54:cb:
a2:11:ca:6b:07:15:e1:35:26:6c:27:d5:2a:69:fe:04:b9:e4:
7a:cc:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:49 2024 by rpki-client on console-ams.rpki-client.org