Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
File: HHJWatYok1xux10O3dMXx7CnZpM.cer (raw, json)
Hash identifier: y00o6naXEN2nmre2u2q1aOMplO1eOWF7znP15kxc3kg=
Subject key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3111E4A01EE572DF624FC17E28A41ADD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jan 2024 12:07:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.153.32.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:11:e4:a0:1e:e5:72:df:62:4f:c1:7e:28:a4:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 12:07:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:ba:ea:f0:cb:18:34:dd:00:34:21:3c:0d:
6a:6d:e4:4d:85:6b:b9:a2:51:30:3a:a9:ec:ca:58:
74:55:00:30:73:4b:6a:be:72:79:be:75:90:9a:b7:
c6:3a:39:75:c9:94:36:1b:53:66:30:c0:2f:57:aa:
18:15:ce:7d:d3:ed:9a:62:84:1f:07:be:07:a4:0d:
87:e3:7c:23:87:f3:ae:25:70:a6:4f:1f:d3:c9:3a:
28:2e:93:16:7f:fa:de:0d:d7:79:f3:63:59:18:1c:
9d:d6:c8:90:9d:ea:77:67:2a:08:57:c8:50:06:fa:
69:e3:08:b1:61:c8:a5:0a:26:a4:40:00:20:21:43:
06:de:e5:54:71:20:60:99:c4:9e:27:11:55:95:79:
61:88:ef:fb:1b:1d:12:9f:b7:15:38:f5:a9:0a:8c:
32:84:36:3a:4a:0c:18:72:41:6c:2a:9f:56:25:6f:
b8:82:15:27:cd:26:a5:bc:78:fb:3d:b2:52:4b:28:
46:5f:35:cd:7b:22:a6:e1:f6:a7:cf:42:61:27:2c:
ea:46:7b:0a:cc:94:7b:e5:3c:67:02:e5:e9:97:cd:
34:ad:11:4c:80:04:05:10:36:8f:5e:29:9e:e4:7f:
41:58:b3:40:88:0e:d1:ac:f9:42:1a:a4:85:9f:0b:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.32.0/22
Signature Algorithm: sha256WithRSAEncryption
97:88:99:07:51:f5:b5:5b:49:c2:61:9d:d6:54:5d:b2:7d:1a:
13:40:04:52:f4:22:76:e9:0f:fd:b6:b9:40:ae:7f:61:04:bd:
8c:22:58:a7:62:0d:1b:fc:19:88:1a:2b:ed:d8:a5:89:ac:54:
29:4c:02:65:99:5e:b6:8e:a4:31:6c:e9:95:3e:98:ca:fb:8b:
9b:62:d6:da:33:78:d2:1c:9e:4d:68:fd:61:47:98:ba:6e:b1:
13:9d:08:d8:c3:15:ec:28:d2:74:dd:55:4f:77:eb:73:77:fd:
64:b1:64:e0:0e:36:94:c6:81:b6:30:a9:ad:a7:8f:a0:e3:a4:
45:f6:b2:50:d5:f0:98:62:f5:9a:f1:b7:d6:10:f7:12:c7:04:
e4:98:f9:8d:73:54:4f:90:5f:e5:1d:3a:fc:68:a4:7c:6c:26:
60:bf:84:2f:ac:15:e0:b2:6a:63:18:cb:dc:cc:0a:cb:6c:cf:
26:86:c3:4d:70:9b:b4:c1:6a:b7:c8:a3:c6:36:df:4d:70:57:
c5:b6:fb:59:2c:7e:51:1b:f2:40:be:4e:48:ff:ef:de:49:53:
c4:1c:f7:20:63:27:39:d8:3c:e6:b7:fd:d8:3a:e2:13:e1:cb:
06:17:fd:d4:ab:9f:d5:05:68:66:71:4d:13:0e:be:dd:2e:38:
82:d9:a7:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY0xEeSgHuVy32JPwX4opBrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTIyMTIwNzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzcyNTY2YWQ2Mjg5MzVjNmVjNzVkMGVkZGQzMTdjN2IwYTc2NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95m66vDLGDTdADQhPA1qbeRNhWu5
olEwOqnsylh0VQAwc0tqvnJ5vnWQmrfGOjl1yZQ2G1NmMMAvV6oYFc590+2aYoQf
B74HpA2H43wjh/OuJXCmTx/TyTooLpMWf/reDdd582NZGByd1siQnep3ZyoIV8hQ
Bvpp4wixYcilCiakQAAgIUMG3uVUcSBgmcSeJxFVlXlhiO/7Gx0Sn7cVOPWpCowy
hDY6SgwYckFsKp9WJW+4ghUnzSalvHj7PbJSSyhGXzXNeyKm4fanz0JhJyzqRnsK
zJR75TxnAuXpl800rRFMgAQFEDaPXime5H9BWLNAiA7RrPlCGqSFnwuhUQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBxyVmrWKJNcbsddDt3TF8ewp2aTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzhlZDdj
OS0wYjQ1LTRkMjEtYTIwMy1mYzc1MjFhMjViYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvOGVkN2M5
LTBiNDUtNGQyMS1hMjAzLWZjNzUyMWEyNWJiYS8xL0hISldhdFlvazF4dXgxME8z
ZE1YeDdDblpwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuZkgMA0GCSqGSIb3DQEBCwUAA4IBAQCXiJkH
UfW1W0nCYZ3WVF2yfRoTQARS9CJ26Q/9trlArn9hBL2MIlinYg0b/BmIGivt2KWJ
rFQpTAJlmV62jqQxbOmVPpjK+4ubYtbaM3jSHJ5NaP1hR5i6brETnQjYwxXsKNJ0
3VVPd+tzd/1ksWTgDjaUxoG2MKmtp4+g46RF9rJQ1fCYYvWa8bfWEPcSxwTkmPmN
c1RPkF/lHTr8aKR8bCZgv4QvrBXgsmpjGMvczArLbM8mhsNNcJu0wWq3yKPGNt9N
cFfFtvtZLH5RG/JAvk5I/+/eSVPEHPcgYyc52Dzmt/3YOuIT4csGF/3Uq5/VBWhm
cU0TDr7dLjiC2aeJ
-----END CERTIFICATE-----
Generated at Fri May 3 13:08:01 2024 by rpki-client on console-fra.rpki-client.org