Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hvF8Pifporj-ad119Im_cgr30qo.cer
File: hvF8Pifporj-ad119Im_cgr30qo.cer (raw, json)
Hash identifier: JR3xrGt2Ye3iu0Rk3SZsNhtTCahQMQfsTBQyXrWYB4Q=
Subject key identifier: 86:F1:7C:3E:27:E9:A2:B8:FE:69:DD:75:F4:89:BF:72:0A:F7:D2:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B73211A502A13CD9E57AE4E3FD0815
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.121.56.0/24
IP: 2001:678:f44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:32:11:a5:02:a1:3c:d9:e5:7a:e4:e3:fd:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86f17c3e27e9a2b8fe69dd75f489bf720af7d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:6b:a3:dd:6f:ab:8d:77:ca:26:45:c5:96:
a8:90:86:11:76:29:7f:8c:50:ca:0f:db:45:9c:de:
2c:40:e9:03:8d:2f:1e:f2:92:b8:fa:f7:d7:96:6c:
94:01:2f:94:06:a1:a1:75:0c:bb:ac:01:9c:11:b0:
e8:6e:4f:c9:ea:b3:4c:0a:0b:47:de:64:77:79:e2:
76:7c:a3:1d:37:4d:6e:f9:27:59:5a:6e:67:9e:09:
59:c6:47:ae:70:9b:7a:6d:57:96:b8:63:c7:55:c8:
29:19:29:d2:3d:31:5d:38:7c:ce:42:c1:0a:75:00:
00:cc:45:99:bb:38:fb:79:b2:8d:51:f7:b0:7f:5a:
51:e8:b3:90:29:68:6a:10:15:56:32:92:dd:32:55:
4e:7b:ce:77:93:2a:14:bb:11:02:d9:bb:a1:28:cc:
00:c4:fa:03:5a:91:b1:d7:59:61:e8:a7:09:44:e0:
e3:c3:94:af:b8:54:57:80:87:94:01:0d:40:59:b0:
25:a2:3c:f7:7c:6c:7a:f2:81:e5:81:f1:cd:9e:0d:
bd:ab:84:cc:c9:0e:c2:42:af:7e:bd:0f:56:76:c8:
47:f7:15:76:27:c8:6b:80:7c:d5:d8:92:89:91:60:
70:62:1f:64:72:5d:ef:d7:1f:62:c7:92:1a:1e:66:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:7C:3E:27:E9:A2:B8:FE:69:DD:75:F4:89:BF:72:0A:F7:D2:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d561c-063c-4fbb-903b-2f21e9dd5708/1/hvF8Pifporj-ad119Im_cgr30qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.56.0/24
IPv6:
2001:678:f44::/48
Signature Algorithm: sha256WithRSAEncryption
14:b5:f2:80:be:44:f0:b7:a5:86:4d:a8:ff:bb:59:95:4b:d8:
e4:e5:c6:c7:5d:35:a7:a0:fa:c1:a5:0c:9e:7a:76:10:d4:a5:
de:6a:fb:b2:04:b4:fb:80:ec:f5:7b:26:8c:22:92:a1:c9:6c:
1b:28:3a:9b:ab:ee:3d:2c:83:35:63:82:ff:fd:7a:e4:4c:cf:
9a:54:82:fc:60:d9:be:c4:0f:55:80:a2:57:eb:8b:62:06:b7:
d8:02:7c:97:13:55:8f:d3:be:82:bc:c6:84:61:8b:f5:b3:ef:
1c:7c:18:54:05:16:e4:fe:9f:6c:b6:b7:8e:a7:02:72:32:45:
ad:25:35:c3:b2:a3:e9:e2:59:20:26:76:e1:59:c9:1a:de:0d:
91:eb:2f:15:68:6f:cc:21:e1:6e:be:56:1d:c7:60:9f:e4:c9:
af:3f:3d:8f:cd:12:25:4e:92:25:5f:89:fc:7f:be:c7:e6:b4:
7b:ba:d7:1e:fb:34:b7:51:3e:e6:1b:21:6d:c8:90:ed:19:12:
a7:59:99:ca:bc:06:af:b7:18:58:a3:88:87:9c:b4:5e:77:00:
90:a4:7f:7c:57:af:f0:03:b6:b2:92:a5:d7:2f:fe:36:1c:82:
90:df:b4:05:c1:7c:3a:3b:9d:aa:4f:6c:70:5c:95:8f:63:c4:
74:67:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:41 2024 by rpki-client on console-fra.rpki-client.org