Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer (raw, json)
Hash identifier: ahKVSaFEs0hY0NZBO3HCUBSugP1xOApyFreInKDAnoI=
Subject key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72773462D45C9AE3751F49DCADAC08B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60171
IP: 185.10.164.0/22
IP: 185.35.140.0/22
IP: 2a00:dd60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:46:2d:45:c9:ae:37:51:f4:9d:ca:da:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:55:fe:e3:6f:9a:a9:be:46:5a:c9:35:94:
7d:e4:f4:a1:78:8a:a4:01:14:81:f0:f5:d9:e8:0a:
6c:11:ef:1a:70:b0:a0:6c:38:35:c1:d9:b5:af:b7:
84:67:81:fe:98:ef:fc:a5:cb:02:b5:b0:68:49:a3:
1e:f3:15:25:6e:a4:d2:01:f3:5a:14:c9:89:14:df:
93:61:a7:7a:86:d6:8c:2d:8f:7f:09:0d:6c:2e:a1:
f1:f3:d7:55:60:44:7d:90:da:b1:be:a4:3e:4b:15:
a1:22:41:f0:08:8b:07:8b:ee:29:2f:3d:a2:01:35:
e5:67:fd:6e:04:a8:2e:4a:28:9f:e5:ed:22:75:b6:
37:15:19:0d:94:73:7b:c1:5f:b3:8c:60:d8:a8:ed:
1b:55:34:0b:82:b9:fe:cb:01:82:4e:b9:c8:68:05:
b4:1a:95:26:39:a3:3e:d6:57:74:bb:82:ad:e1:a5:
49:e4:7b:65:44:19:fc:84:eb:2b:b3:71:5b:7b:72:
4b:cd:fe:69:60:0d:43:00:6a:4d:1b:12:c3:34:80:
b5:9e:1e:0e:db:f4:c2:01:e5:b3:bf:7f:04:37:12:
fe:34:cc:66:04:24:10:ed:98:ba:cb:f5:dc:9b:a6:
7a:43:f5:9c:0b:87:5b:21:a6:59:10:71:e6:f3:0f:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.164.0/22
185.35.140.0/22
IPv6:
2a00:dd60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60171
Signature Algorithm: sha256WithRSAEncryption
a8:ea:84:53:24:0d:1c:81:05:fb:fe:d1:3c:09:e5:e2:54:d5:
d5:36:41:c8:ae:35:3c:dd:e4:bb:63:b4:83:74:1d:d7:f3:95:
4f:c1:d3:57:58:f2:53:59:0d:35:6f:64:13:d4:40:0c:07:04:
98:87:0a:08:7b:3d:3c:c4:31:a2:18:88:92:33:91:4c:c0:94:
c8:82:35:2a:7a:20:93:d9:89:ba:81:d3:30:1e:0c:50:be:35:
fc:7b:52:c1:bb:7e:7e:cc:41:cb:a3:2a:51:08:3d:3d:b0:fb:
ef:23:e1:97:34:ab:03:7b:f7:23:d3:f5:e3:66:d0:27:51:c1:
45:9b:62:85:13:41:7d:78:b3:b7:0d:37:8c:8e:f0:c7:32:f1:
1c:55:71:81:25:9d:d5:69:d4:1b:44:52:04:06:84:7b:66:0a:
8d:6e:1c:95:a8:f4:c0:16:f7:4b:8f:c6:7b:61:6e:fe:2a:df:
ef:bb:be:a2:ff:30:87:05:db:09:d3:5c:bf:6a:be:ff:36:36:
85:6f:71:e0:ef:5a:2f:b5:41:26:f8:31:41:ae:82:10:3e:84:
22:f1:4d:60:61:4f:49:f9:00:15:a6:bf:7a:b1:32:f8:6b:5c:
67:5e:1f:76:a9:51:5a:41:a3:bf:f1:58:45:72:cc:83:26:e0:
ec:57:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:59 2024 by rpki-client on console-ams.rpki-client.org