Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer (raw, json)
Hash identifier: mvoIA9Goj7aB44lJV9fyKfKcYyKRlSHo+fEwZR29ukw=
Subject key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC519EDBC8C59855EB25E0754DCCCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.253.8.0/24
IP: 2a12:85c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:51:9e:db:c8:c5:98:55:eb:25:e0:75:4d:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:95:e4:a6:0b:1a:fe:51:ac:db:79:a2:a9:
8a:80:42:bd:d2:a8:d3:cc:c3:bd:a6:66:52:4a:fb:
dd:f7:7f:60:3c:b8:47:e7:e2:95:38:82:05:b5:57:
e7:99:c5:35:a5:61:e4:d7:a7:7b:a3:78:bb:33:ba:
60:fb:c6:7b:62:63:c5:a0:8a:3c:3a:47:5c:62:95:
9b:c6:68:9e:1f:28:14:11:cd:8f:c2:06:c1:89:53:
82:e3:52:40:28:ad:af:f8:f3:87:92:c8:20:68:df:
89:85:68:f8:64:98:17:63:33:36:26:a8:1d:8a:8e:
d6:a3:12:26:3a:79:68:d8:24:c1:fe:e3:ed:e6:70:
26:ae:25:56:a4:da:78:15:08:ce:2b:02:2f:2e:c9:
b2:dc:fc:a8:a3:b3:a7:8f:67:72:56:03:86:57:b1:
22:c7:d4:2a:6f:57:23:51:f3:ad:c1:ab:18:38:75:
99:e6:6a:9b:90:e9:54:42:fb:20:ec:45:ad:38:9d:
28:1a:09:2b:ba:8c:a1:c8:6f:a7:45:48:77:3f:50:
bf:5a:b4:af:0d:62:21:af:df:ef:fd:35:8e:1b:1e:
e6:8d:c8:54:4e:59:cb:97:b3:51:98:5a:19:a6:58:
61:4a:15:69:b9:d5:9f:0a:03:6a:33:49:62:25:8a:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.8.0/24
IPv6:
2a12:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:d2:c0:34:91:60:a7:93:ed:0b:40:96:19:25:31:ac:12:f2:
fe:da:a7:ee:d7:d0:24:ff:8c:1e:ee:58:65:64:9a:10:e4:87:
e3:0d:26:f6:31:e3:89:ac:76:0e:36:d4:34:09:b8:34:b0:51:
27:dd:bc:f6:01:79:34:7d:e5:59:90:69:93:03:10:10:f4:8b:
5b:9a:07:52:b6:da:16:da:d9:b9:83:dc:14:c1:a2:4f:bb:91:
b9:77:7f:c4:90:79:9e:34:0c:d8:98:5d:19:7d:9a:c2:0f:3d:
d4:23:f9:65:18:8b:7b:86:fd:f5:4b:c1:ec:44:1e:05:09:78:
8a:ee:49:1f:a9:20:fc:d0:e1:34:6a:db:b7:29:dc:e3:dd:b0:
f8:c0:d5:69:c4:a4:ad:a5:d1:11:f2:1b:7c:fa:59:0b:9f:65:
6e:a2:50:f5:e0:47:21:4a:41:bd:fb:8f:c0:61:f3:a0:b7:be:
04:a3:b0:ad:18:33:22:d4:b0:23:5f:88:72:b4:03:43:3d:f6:
96:5f:4e:c2:03:89:2d:40:89:0f:e4:70:f8:bb:57:5c:3a:91:
c2:19:3e:d2:0f:ac:b8:da:7c:af:8d:29:3f:f0:3b:ba:0a:6e:
db:9c:38:a0:fc:3f:89:32:88:7d:65:79:0d:7c:f5:a5:49:3f:
7a:1b:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:15:46 2024 by rpki-client on console-fra.rpki-client.org