Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
File: HW2cywJxWEmzoey800toh_ZJlA8.cer (raw, json)
Hash identifier: sje/jR8Z3URHz2CUL1CjIivReUVdiUgpj6mprIrG82c=
Subject key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34918BF62426EDCCB348FE665241432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.141.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:18:bf:62:42:6e:dc:cb:34:8f:e6:65:24:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:5d:55:5b:b7:ae:28:b9:1f:ca:8b:59:67:
48:0e:bc:9e:08:54:f2:3a:77:ff:86:1c:8f:7b:4e:
c7:39:fa:a0:c4:45:7d:06:c4:c7:0c:2f:e7:bb:51:
9c:cd:b4:23:cb:cd:38:fe:e5:db:60:5e:6e:cb:ba:
26:b2:94:8b:08:c9:bf:02:a1:43:6b:6e:0e:62:2b:
8e:61:f1:1a:f7:42:97:47:94:b5:72:5d:9b:1a:08:
65:b3:b7:d1:f3:9c:c6:3c:fe:8f:b5:dc:37:27:cf:
60:df:38:66:19:d7:49:7b:51:c7:32:28:a3:b6:cc:
2b:45:35:84:d3:63:ef:14:bd:05:8c:2c:de:c4:18:
96:cd:99:35:60:94:3c:98:0f:0b:d6:72:44:a9:5a:
83:91:43:63:19:7b:64:e9:88:e5:a3:58:26:b9:60:
37:c1:5d:09:fe:c6:e2:73:b8:65:8c:50:04:0d:31:
81:65:5a:11:ae:73:bb:3c:e6:5a:1a:39:92:ec:a2:
36:6c:22:86:59:d5:1b:6b:3f:30:5e:d0:00:75:ff:
3c:80:c4:26:5f:df:cb:2a:22:5e:33:0d:d5:4a:cb:
84:74:b9:c7:6e:70:b5:f1:93:d2:47:b3:e0:15:c4:
d3:96:69:fe:a7:14:cd:50:bc:04:0f:82:f8:76:8c:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.139.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9e:b5:ba:6d:25:15:e0:9e:b7:a3:52:f1:93:4a:a6:10:b8:
3c:be:6d:40:50:45:e0:fd:fe:55:17:15:f6:6e:ad:68:d4:e1:
e8:16:56:10:e0:86:49:c6:7a:58:ae:59:27:19:4c:cc:27:90:
cb:c8:f6:b7:4b:9e:58:60:01:76:c8:cb:1f:05:db:78:22:fe:
f0:b7:0a:27:4e:99:65:35:ba:70:33:6c:12:d5:be:0b:ac:68:
97:85:ef:2f:a1:5d:85:f3:f6:6c:f1:7b:33:1f:e4:70:0b:6c:
b7:32:8b:45:8e:52:f9:f5:85:2b:fc:91:62:f0:8c:04:d3:28:
6e:ee:9a:bd:ed:23:c5:5c:2f:b9:de:69:f1:2d:6e:d6:d5:25:
d9:71:f9:96:6e:c8:9b:47:c4:9c:ed:0b:d7:e1:84:eb:a3:f1:
0d:3c:ac:69:a1:1e:d0:69:b3:2d:71:ae:70:f3:ed:67:84:e6:
86:fb:d2:65:c6:f2:c9:3f:33:a5:55:eb:06:aa:32:0b:32:25:
73:59:08:d5:b6:99:5e:7e:17:59:1d:39:56:23:3c:74:a1:be:
13:85:ef:9f:db:d9:f2:15:e2:4e:82:d3:07:e3:8b:48:97:4b:
0b:df:fa:a2:de:0c:ac:b0:d1:6b:07:99:de:9d:73:29:0d:7d:
96:95:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:22:04 2024 by rpki-client on console-ams.rpki-client.org