Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.cer (raw, json)
Hash identifier: rCllfW+YBO55HEUhw7GTr3Xv+sE/eXrWTDznFqeewls=
Subject key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802A93652581378FFD3BF0867305FF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206496
AS: 208455
AS: 212564
IP: 45.15.32.0/22
IP: 185.185.64.0/22
IP: 185.198.14.0/24
IP: 2a0b:4a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:a9:36:52:58:13:78:ff:d3:bf:08:67:30:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:f8:5a:56:0f:12:6d:e6:14:21:9d:5f:f9:
e2:09:88:20:da:d7:d2:d4:08:98:a5:c7:a2:ff:3d:
42:d1:b8:9d:03:dc:40:ad:19:7b:29:06:20:32:dc:
ad:c2:22:c7:1a:e0:bc:73:a0:a8:c4:29:cd:3b:07:
02:9e:51:19:a3:13:f5:80:43:7d:59:f9:f9:90:c8:
38:64:8e:de:be:d5:73:61:c6:df:7a:6d:05:1d:9d:
d9:e0:38:4b:50:70:c0:eb:68:ca:61:ea:b6:45:a6:
bd:b5:9d:79:c1:d9:5d:f2:8b:69:0e:ba:0a:97:70:
b2:ce:b2:ed:6f:ac:2a:4f:f7:d9:6e:b7:d4:7d:37:
43:f2:57:31:db:bc:cc:87:78:89:a3:be:57:02:98:
64:05:dc:4e:51:ff:ab:e7:dc:1a:a8:f1:d0:cb:c9:
21:1a:70:b4:9b:00:dd:ca:5b:49:f5:82:e4:bf:15:
91:19:41:99:2f:40:47:2b:58:d8:e6:de:4c:08:c2:
bf:04:63:52:ec:ff:12:af:80:c2:cc:c5:40:ca:5c:
a7:b5:93:2b:71:a5:f6:b7:70:b5:de:a9:f2:eb:14:
fc:bc:b6:e3:d0:c6:5b:91:7e:0e:d3:a2:0b:ec:53:
5f:8b:96:df:da:31:7a:f4:5f:f3:95:e0:a4:fa:1f:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.32.0/22
185.185.64.0/22
185.198.14.0/24
IPv6:
2a0b:4a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206496
208455
212564
Signature Algorithm: sha256WithRSAEncryption
91:a0:63:6d:9b:4f:ff:83:c3:f8:c6:e5:ad:54:8f:8d:d1:58:
db:88:bb:83:60:b6:17:02:15:72:71:3d:7c:84:a3:d7:f0:35:
16:2b:4d:70:73:86:f6:fb:cb:cf:d8:b2:57:c5:36:e5:28:a3:
0d:7b:fa:46:ad:9d:2b:f8:76:a8:44:37:32:86:81:ff:5e:76:
2b:cf:1b:26:46:cc:79:fb:f3:fa:58:e9:8b:41:17:6f:1f:9e:
97:c0:92:6b:99:df:a4:d2:a6:9b:b0:d7:ca:f7:2e:d3:9b:55:
63:b9:92:cc:4f:f4:3e:6e:c9:68:77:c4:2c:78:e9:f6:bb:36:
90:49:25:6b:70:3f:da:d7:b0:fb:d1:7f:f4:d2:98:79:a3:14:
36:53:8b:33:79:9a:f9:8d:a2:8b:d9:17:f1:07:da:48:cc:32:
26:4d:37:f9:84:52:e7:61:13:33:e9:e0:8b:f2:9e:2d:87:b2:
a0:19:ea:63:8b:0c:63:79:4b:09:a9:42:92:1a:5e:d7:19:ad:
b1:ac:f1:bc:2f:f4:b2:09:80:61:0c:07:fb:88:35:11:2e:a2:
13:42:83:d2:8e:ef:68:32:3e:9a:0a:bb:3b:aa:58:cc:c2:0c:
c0:df:48:0c:80:67:e8:aa:62:ee:81:a9:11:30:bf:3a:7b:c4:
a5:39:c0:56
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAYzIAqk2UlgTeP/TvwhnMF/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzJjZjU3MjcxYzJiOGYwNGJhYTdlNjNhOWI4MTAzZDUyMDNkN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3n4WlYPEm3mFCGdX/niCYgg2tfS
1AiYpcei/z1C0bidA9xArRl7KQYgMtytwiLHGuC8c6CoxCnNOwcCnlEZoxP1gEN9
Wfn5kMg4ZI7evtVzYcbfem0FHZ3Z4DhLUHDA62jKYeq2Raa9tZ15wdld8otpDroK
l3CyzrLtb6wqT/fZbrfUfTdD8lcx27zMh3iJo75XAphkBdxOUf+r59waqPHQy8kh
GnC0mwDdyltJ9YLkvxWRGUGZL0BHK1jY5t5MCMK/BGNS7P8Sr4DCzMVAylyntZMr
caX2t3C13qny6xT8vLbj0MZbkX4O06IL7FNfi5bf2jF69F/zleCk+h8aLQIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFBws9XJxwrjwS6p+Y6m4ED1SA9f4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzVhYmM5
Mi1mNTVhLTQ1NDgtOWEwMC01YjQ1MzZhNzllODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNWFiYzky
LWY1NWEtNDU0OC05YTAwLTViNDUzNmE3OWU4Mi8xL0hDejFjbkhDdVBCTHFuNWpx
YmdRUFZJRDFfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLQ8gAwQCublAAwQAucYOMA0EAgACMAcDBQMq
C0qAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMmoAIDAy5HAgMDPlQwDQYJKoZI
hvcNAQELBQADggEBAJGgY22bT/+Dw/jG5a1Uj43RWNuIu4NgthcCFXJxPXyEo9fw
NRYrTXBzhvb7y8/YslfFNuUoow17+katnSv4dqhENzKGgf9edivPGyZGzHn78/pY
6YtBF28fnpfAkmuZ36TSppuw18r3LtObVWO5ksxP9D5uyWh3xCx46fa7NpBJJWtw
P9rXsPvRf/TSmHmjFDZTizN5mvmNoovZF/EH2kjMMiZNN/mEUudhEzPp4Ivyni2H
sqAZ6mOLDGN5SwmpQpIaXtcZrbGs8bwv9LIJgGEMB/uINREuohNCg9KO72gyPpoK
uzuqWMzCDMDfSAyAZ+iqYu6BqREwvzp7xKU5wFY=
-----END CERTIFICATE-----
Generated at Thu Apr 18 21:27:36 2024 by rpki-client on console-ams.rpki-client.org