Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
File: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer (raw, json)
Hash identifier: 127HGfajvJCoyrjYxcl3VyzQg8Ag+q05GbabGoaFgZE=
Subject key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254EAAEC798B0148BC4FDCC819644F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30971
AS: 49488
AS: 201612
IP: 83.136.32.0/21
IP: 185.102.12.0/22
IP: 193.46.104.0 -- 193.46.135.255
IP: 194.0.10.0/24
IP: 194.0.24.0 -- 194.0.26.255
IP: 2001:678:d::/48
IP: 2001:678:1c::/48
IP: 2001:678:20::/48
IP: 2001:678:24::/48
IP: 2001:67c:1bc::/48
IP: 2a02:850::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:aa:ec:79:8b:01:48:bc:4f:dc:c8:19:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:0b:f1:e1:a7:3f:d1:87:f3:5e:15:33:01:
1d:c4:2a:c8:71:6f:1b:67:53:ea:a1:64:d3:74:52:
c4:19:a5:a4:e2:e0:82:28:f7:5a:94:f2:c4:3a:05:
94:bf:53:02:df:5c:07:21:48:a8:e9:c8:ce:2a:e8:
33:84:86:9b:55:d3:6d:01:87:55:3d:cc:15:20:ef:
0c:28:1e:81:e9:5b:a5:b8:ef:bd:5e:a7:cf:19:e4:
78:b7:eb:8e:fb:f8:6a:ba:6d:94:0b:2d:9a:12:57:
fd:89:72:6b:ca:66:f9:5a:21:e4:a4:f0:12:d4:58:
d6:87:4f:e0:07:da:cd:24:89:cc:6b:65:bc:9c:ad:
db:7d:e4:32:2a:38:16:6f:e9:db:a2:bb:38:1b:46:
a7:72:5c:5f:40:3c:3c:ca:60:11:61:0a:bf:c9:7a:
25:8a:0a:3b:c2:c0:72:b3:40:45:25:a5:00:01:fd:
b1:c0:bb:b2:14:40:7b:5b:a9:08:44:04:31:85:d7:
e0:a1:0b:52:44:9a:05:e9:94:4d:42:5d:1a:24:1b:
e5:85:53:28:c8:21:40:d4:e0:45:99:ed:0c:85:18:
63:15:d7:30:ee:37:e2:e2:bb:92:d9:c9:82:2c:11:
f7:75:5b:e1:50:52:60:bb:0e:b9:4b:13:7f:68:df:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.32.0/21
185.102.12.0/22
193.46.104.0-193.46.135.255
194.0.10.0/24
194.0.24.0-194.0.26.255
IPv6:
2001:678:d::/48
2001:678:1c::/48
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30971
49488
201612
Signature Algorithm: sha256WithRSAEncryption
67:1a:a2:82:b7:eb:68:c4:19:cd:cf:42:fa:c5:bb:2e:11:7f:
55:14:20:93:42:d5:19:c1:c0:e2:11:85:da:bd:4e:73:56:ad:
a6:27:53:24:8a:ee:5c:4b:d6:f6:b9:4c:27:80:48:6b:20:ab:
ff:ce:b0:ea:52:ff:3f:3d:d4:0f:65:0b:a2:75:f5:94:a8:f6:
75:f8:b4:c2:07:8c:01:5e:7a:43:2d:6e:a9:ba:5b:06:11:db:
96:59:5a:03:ff:17:22:89:3c:d2:ae:e2:5e:f8:bc:66:50:13:
03:38:a6:72:b6:3f:7c:ac:26:19:3b:04:92:18:80:30:a0:1e:
59:67:9c:d9:98:4d:1b:bf:80:54:30:b8:3a:a3:5b:8c:d3:f9:
e3:33:92:ce:8f:fb:5e:70:e4:85:7b:9d:08:ae:c1:b3:8c:ee:
d4:60:af:4c:e5:2d:c6:3c:2f:d4:3b:96:93:52:3d:4c:78:4b:
0d:bb:b7:f7:eb:6a:4b:d1:b0:c5:0b:85:2e:52:e6:cd:d4:d5:
ef:0e:e4:0a:aa:e9:35:a7:b4:dc:50:ae:81:40:b3:10:85:c0:
15:3b:b4:ae:1b:1c:8d:3f:02:da:6a:57:f9:88:d9:45:9e:9f:
b2:0b:cb:a9:7d:69:3a:29:9c:d8:f3:ed:3d:29:38:bd:e4:e8:
41:a0:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:20:04 2024 by rpki-client on console-ams.rpki-client.org