Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
File: hst0KgO8nIVQcheiUgTf_4L8zfk.cer (raw, json)
Hash identifier: xma/4IRLFOEukJ+80LTTUsJi5picDw/8fkqQhQY25BM=
Subject key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AA3364295444DD70A0AD2D3E6204B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.192.232.0/21
IP: 80.85.152.0/21
IP: 185.118.164.0/22
IP: 185.144.28.0/22
IP: 2a03:a0e0::/32
IP: 2a0a:eec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a3:36:42:95:44:4d:d7:0a:0a:d2:d3:e6:20:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:8c:14:08:45:7a:da:2e:b8:b1:cf:ab:c3:
be:69:69:cf:43:75:79:e9:56:c6:18:68:df:73:44:
fb:70:68:88:1a:80:dc:69:79:e1:dc:3a:15:00:a2:
18:16:3b:5c:b3:53:41:d1:04:05:03:0a:2e:db:51:
7e:9d:a7:a2:23:b4:dd:56:f6:3e:b2:7c:87:1f:1e:
71:17:ff:4f:31:31:9e:94:41:1e:a3:aa:12:bd:8f:
08:dd:63:03:9e:f4:02:c7:7b:98:98:03:e3:a8:41:
78:fc:89:66:bd:b5:b1:04:0f:ff:ff:f3:cf:67:58:
13:44:4c:21:b7:60:f8:1a:50:d6:e4:b1:1e:49:fc:
db:76:d7:ed:8a:7f:4f:5b:d4:6b:8c:d5:dd:cf:6d:
40:53:6e:a6:ee:45:d0:d9:03:77:e8:14:d6:4b:80:
67:af:23:cc:13:1f:70:df:b1:aa:7c:3f:3c:b3:24:
27:20:2b:bc:81:46:e4:7b:cd:d1:1d:9a:a1:e7:26:
28:aa:37:a0:81:d1:db:3e:1c:81:66:8d:58:66:32:
b6:02:80:0a:4b:29:18:dd:07:85:4d:c7:1c:c3:ad:
41:f9:f2:5e:f2:16:1d:20:21:e5:c1:68:aa:e7:25:
77:9b:4d:05:be:a4:ff:af:d9:44:f9:b5:c6:a4:14:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/21
80.85.152.0/21
185.118.164.0/22
185.144.28.0/22
IPv6:
2a03:a0e0::/32
2a0a:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
32:bc:9f:79:26:17:ab:80:77:a0:3c:c7:42:6b:79:ba:70:cc:
3a:a5:ad:ba:fc:c2:16:4b:54:88:92:9a:3d:b4:8b:a7:7f:22:
b8:e5:d8:d4:d8:8e:1a:83:2c:41:ad:56:ea:78:42:3a:d4:be:
68:1c:6c:93:73:df:ac:2a:83:1e:4e:f8:85:8c:13:df:59:c5:
78:db:90:88:ef:a4:90:4d:3e:a7:4e:7c:7f:4d:c7:54:80:72:
57:c1:b2:40:a8:2c:6c:90:de:bf:10:85:b4:2e:db:81:75:ae:
2b:b4:76:2d:9f:90:2b:5d:ad:1d:48:5a:9b:04:85:aa:23:49:
27:74:31:d9:bb:42:56:35:67:98:b7:d8:39:31:4e:38:f6:d0:
c5:b6:63:2b:c3:05:0c:12:f9:17:d6:62:9a:ef:b4:73:77:7e:
ba:03:bd:40:14:fa:a6:d5:9a:52:59:77:64:eb:21:0a:55:68:
10:fb:9b:d7:52:55:e6:7f:c7:96:ef:7c:2a:9c:ec:5a:c0:10:
92:a7:0c:8e:e5:c2:4f:84:71:13:4d:2a:c7:5a:1e:50:7d:2a:
c3:38:6d:f2:4b:14:3d:23:57:4a:b4:14:c6:d9:63:fa:40:18:
69:ce:5b:a9:e8:6e:62:93:6e:f6:da:71:7c:5e:c5:b2:41:1c:
51:0b:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:12 2024 by rpki-client on console-ams.rpki-client.org