Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer
File: HEXicj05SBx47Uk3sxko6fYYqfc.cer (raw, json)
Hash identifier: MG4oIHz555gRdnb3gcG+cy9b8TBFPhuko3iSymwlzBs=
Subject key identifier: 1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500097E09EAAC0600209DBF54F6AB44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209612
IP: 194.32.140.0/22
IP: 2a0d:7d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:09:7e:09:ea:ac:06:00:20:9d:bf:54:f6:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c45e2723d39481c78ed4937b31928e9f618a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:72:d9:55:01:00:b9:47:f8:05:79:36:ed:
f8:03:04:9f:ac:8c:98:9a:fd:17:82:bd:0d:ad:81:
e5:06:38:d1:5d:b0:c3:23:3b:a4:ce:18:59:3f:b9:
3a:09:39:92:d3:12:af:04:2c:37:74:01:1c:bc:89:
bd:29:50:61:6a:1d:fe:28:88:16:a0:18:0b:ba:77:
d2:b2:16:7f:50:a3:83:71:7d:9e:bd:88:ce:d6:7a:
8f:69:f9:66:ed:a2:ea:eb:a8:4e:42:a3:a2:0a:c8:
5e:eb:b2:dc:df:8e:dc:f8:36:1d:ca:3b:09:b2:c2:
4f:e0:ec:a4:20:a2:ce:e6:c9:39:ab:fd:a1:d2:b1:
5f:90:4a:8e:aa:4e:75:a2:3d:c0:4b:81:cf:0b:af:
aa:fc:6d:e3:f6:27:2a:47:6b:39:b2:42:a4:56:70:
45:fc:79:81:b9:97:fa:1e:0a:8a:21:b9:ea:93:57:
51:d9:e5:66:76:bf:06:12:75:cf:b2:13:1b:a4:96:
ef:db:98:35:df:27:d7:09:fb:f2:59:bd:d0:26:6f:
f7:64:29:67:5a:df:74:cd:71:fc:c2:32:b9:41:03:
bb:18:ec:96:6a:91:3a:f3:5b:ba:f8:00:53:53:56:
ae:4f:62:c3:9a:e9:7a:91:6f:9d:de:f1:c1:19:99:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.140.0/22
IPv6:
2a0d:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209612
Signature Algorithm: sha256WithRSAEncryption
63:02:24:a8:8d:30:c5:5f:87:4f:f7:61:12:91:70:59:49:5c:
37:99:35:33:38:33:fd:a9:2f:6c:e9:68:eb:53:82:d9:54:4e:
c2:7a:c6:97:59:a3:cd:70:48:20:d7:c2:ac:2e:06:bd:ee:72:
fb:7f:e3:2b:f5:c8:1c:88:09:94:b5:67:46:d5:29:25:58:9c:
d0:d9:d9:d9:06:3b:c3:88:ec:0f:df:6c:2d:d6:de:06:2c:2d:
f1:6d:02:08:f9:c7:5b:4f:83:66:76:95:00:70:b6:86:41:86:
ac:44:ae:58:bb:44:8d:e0:be:70:91:b6:84:69:f9:4c:3a:06:
04:a7:91:18:6e:b3:79:c1:4e:05:fb:8c:c7:b7:37:ee:f6:eb:
11:37:f1:15:60:ab:18:ff:38:a3:98:8b:d4:6f:34:10:6a:64:
96:3f:53:46:e0:83:ef:5d:c2:d8:ff:41:44:62:88:7b:45:4c:
a7:ab:c6:9e:45:f4:c9:0a:5e:4a:09:35:76:b0:29:74:83:69:
7d:79:5b:7e:39:62:2e:fa:45:42:95:64:1b:7f:4f:e7:bf:d5:
f1:f0:52:11:7b:d6:7f:b9:99:44:b1:8d:04:9a:1c:0f:39:ec:
c2:78:be:da:8d:0f:2a:d4:e9:55:41:f1:d6:a2:40:1a:0d:cc:
71:b9:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:22:27 2024 by rpki-client on console-fra.rpki-client.org