Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer
File: HEXicj05SBx47Uk3sxko6fYYqfc.cer (raw, json)
Hash identifier: d9/i0o47magN8Br5y4fztzKM6ZNCl0cM4/vf8KdxAwE=
Subject key identifier: 1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F86DDD50F48992BC36FD76237C4C7E9BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 May 2024 14:03:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209612
IP: 2a0d:7d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:dd:d5:0f:48:99:2b:c3:6f:d7:62:37:c4:c7:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 17 14:03:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c45e2723d39481c78ed4937b31928e9f618a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:72:d9:55:01:00:b9:47:f8:05:79:36:ed:
f8:03:04:9f:ac:8c:98:9a:fd:17:82:bd:0d:ad:81:
e5:06:38:d1:5d:b0:c3:23:3b:a4:ce:18:59:3f:b9:
3a:09:39:92:d3:12:af:04:2c:37:74:01:1c:bc:89:
bd:29:50:61:6a:1d:fe:28:88:16:a0:18:0b:ba:77:
d2:b2:16:7f:50:a3:83:71:7d:9e:bd:88:ce:d6:7a:
8f:69:f9:66:ed:a2:ea:eb:a8:4e:42:a3:a2:0a:c8:
5e:eb:b2:dc:df:8e:dc:f8:36:1d:ca:3b:09:b2:c2:
4f:e0:ec:a4:20:a2:ce:e6:c9:39:ab:fd:a1:d2:b1:
5f:90:4a:8e:aa:4e:75:a2:3d:c0:4b:81:cf:0b:af:
aa:fc:6d:e3:f6:27:2a:47:6b:39:b2:42:a4:56:70:
45:fc:79:81:b9:97:fa:1e:0a:8a:21:b9:ea:93:57:
51:d9:e5:66:76:bf:06:12:75:cf:b2:13:1b:a4:96:
ef:db:98:35:df:27:d7:09:fb:f2:59:bd:d0:26:6f:
f7:64:29:67:5a:df:74:cd:71:fc:c2:32:b9:41:03:
bb:18:ec:96:6a:91:3a:f3:5b:ba:f8:00:53:53:56:
ae:4f:62:c3:9a:e9:7a:91:6f:9d:de:f1:c1:19:99:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209612
Signature Algorithm: sha256WithRSAEncryption
16:88:86:8a:92:69:92:bf:d2:70:63:22:50:1d:37:bb:9a:1a:
f6:2b:60:7f:a7:64:ce:c1:c3:d2:93:6c:da:24:09:95:ef:bb:
a4:46:ca:88:3b:96:07:41:55:f1:46:7f:43:30:10:26:37:8d:
bb:dd:9a:6e:fe:c0:2f:f1:44:ce:29:cc:e8:ca:a2:aa:42:71:
f4:a8:f6:30:44:58:df:8e:c7:af:33:65:df:2a:b6:5d:14:7b:
23:fd:c4:2e:1c:c0:78:bf:58:3e:60:a6:a9:d5:f4:42:11:c6:
57:66:48:17:84:55:2a:05:0a:78:fd:da:35:ef:0a:de:ae:f7:
75:cf:25:e7:1b:85:ff:62:ae:f0:30:0e:c4:fb:d0:05:c5:84:
60:2f:aa:ab:95:13:0f:5c:96:6a:7a:ad:c9:3b:ae:9c:c4:7d:
cb:eb:fd:85:e6:0a:8f:30:dd:ce:07:03:91:87:f3:86:4d:a0:
58:80:70:2c:cd:be:cd:83:d6:4e:89:30:96:21:a6:1c:67:24:
b1:c0:87:33:4d:1a:57:83:74:f9:4d:15:57:b5:3e:8c:08:74:
d3:57:f6:01:f9:08:02:dc:56:05:10:6f:f7:31:b6:97:30:a6:
0e:58:a8:6c:1b:b4:b2:fc:61:c9:cd:cf:12:94:cc:68:e9:50:
44:e3:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:21:49 2024 by rpki-client on console-ams.rpki-client.org