Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
File: HGnHYzivyQhbj71mm4t0vXqS1DE.cer (raw, json)
Hash identifier: YhRmvW6hLEHJNwQKchxgztlqsVt/5sy8DPSeBzKsoGc=
Subject key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2854EB6C983B9A9531368350BED9C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:31:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212351
IP: 2001:678:eb0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:54:eb:6c:98:3b:9a:95:31:36:83:50:be:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:77:bd:e3:7c:81:52:6b:05:9b:a1:81:3e:
47:05:f0:d1:fb:a4:64:da:cd:2b:1d:6f:1c:fa:01:
1e:73:60:82:68:b9:7c:1f:24:13:42:92:fc:8a:76:
55:01:8d:6a:53:42:8a:d0:57:fa:61:c3:32:f6:3a:
fe:51:a1:ff:f2:69:a7:72:37:dc:01:10:ea:d8:9f:
a9:39:63:d4:eb:63:0a:aa:2a:62:21:06:43:df:a2:
5b:8a:70:d1:df:49:00:2d:2d:45:0b:1d:28:15:32:
92:17:4c:b2:8b:46:c8:19:48:ac:58:2a:73:54:77:
5c:a4:78:7f:a4:32:d9:77:10:2b:9f:69:89:1e:92:
45:4f:6f:5a:22:64:9f:d2:1c:63:a2:b5:c7:13:5f:
31:19:bf:0a:ba:24:11:52:23:7f:e6:89:43:5c:52:
a4:5c:2f:24:2a:14:0c:6d:58:77:0d:e8:75:bd:57:
71:26:fb:dd:f9:42:a3:87:85:8e:ba:3c:24:d1:e8:
e1:45:83:32:52:48:b5:60:2b:bd:01:08:98:bc:9a:
37:89:89:ed:ea:71:29:b3:28:62:77:b0:bf:ac:13:
cb:f7:6e:09:f0:1e:5d:10:7e:39:6d:d8:16:1b:71:
06:12:19:f8:84:38:04:0e:ae:86:59:e9:d1:75:b8:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:eb0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212351
Signature Algorithm: sha256WithRSAEncryption
38:c5:d4:54:96:58:9a:ec:de:b7:08:29:d2:1a:6e:1c:91:c8:
8f:cf:81:af:05:fe:e8:cf:46:a0:3d:bd:6c:29:a5:f1:73:13:
5a:86:a4:bd:40:ee:b3:df:fd:a7:6e:f3:b5:30:8f:28:df:c7:
2f:ca:a7:58:fd:8c:f1:1a:5e:9f:5a:17:fe:a1:42:48:eb:43:
51:d6:f8:aa:7f:8c:d7:44:92:1e:d2:bd:49:6d:95:df:4a:15:
04:07:e9:2e:dd:ad:b0:18:6d:20:4c:e1:d6:31:fa:6b:ee:dc:
d2:ac:e4:4d:26:ce:0a:52:5f:32:15:99:91:40:55:1e:2b:82:
54:ac:e4:88:0b:ee:66:8f:6d:e6:92:ee:bc:e4:f9:1c:bd:33:
7e:dc:59:03:f3:c8:f2:f2:c3:c2:ae:69:3f:ce:a6:26:b3:17:
c5:a9:aa:06:85:b5:e1:9a:db:65:bd:47:65:13:39:81:1c:e4:
6d:15:be:c0:aa:51:e5:7e:f6:17:d3:f9:d9:43:9a:42:5a:66:
71:c2:dd:7f:c7:55:13:1b:29:0a:b2:ff:e6:1c:8b:6d:fd:1e:
e1:3d:d6:f2:76:f0:78:50:a0:54:39:ff:e2:7b:8f:90:31:18:
53:f2:80:06:e9:62:31:83:d3:fc:b0:40:d1:3a:55:20:c4:79:
7a:72:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:22:28 2024 by rpki-client on console-fra.rpki-client.org