Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.cer (raw, json)
Hash identifier: 7j03LV53Okovan4f96s285wvJDGfgwewpHr5mgh9DoA=
Subject key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493566BEADE24375CD3D8D7EAED02CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43500
AS: 50651
IP: 185.130.208.0/22
IP: 185.139.218.0/23
IP: 195.189.144.0/24
IP: 212.46.44.0/24
IP: 2a12:b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:56:6b:ea:de:24:37:5c:d3:d8:d7:ea:ed:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:a3:06:7d:01:6c:2f:9b:ec:b5:e2:ee:6e:
92:a5:a7:6d:6e:23:dc:79:30:f0:54:f5:77:3d:f5:
33:88:b2:83:0e:1c:7a:ac:fd:ed:02:38:fc:33:ac:
ca:81:24:aa:8b:91:c1:c6:ba:25:58:96:63:18:cc:
f2:81:72:74:b0:25:f8:2e:5c:43:d4:77:72:bd:56:
dc:cc:29:54:e7:71:ed:f8:f8:22:65:55:2f:1f:29:
38:e4:21:14:8b:9c:5d:06:ac:fc:b5:0e:3d:e1:e5:
c1:c8:1d:4e:8a:be:e3:1f:57:56:da:ee:aa:06:87:
99:21:7b:2d:96:6f:b4:e9:bc:f0:e3:23:67:18:07:
15:ec:28:74:98:61:d8:67:5a:4d:d6:ce:5f:f7:29:
86:ac:69:fc:f3:32:d6:9e:c2:77:95:0d:d3:3b:18:
0d:75:75:27:65:b3:70:4a:80:8a:4d:87:bb:ab:72:
ae:71:5a:6a:08:3c:56:d9:aa:d1:d8:44:51:29:28:
ed:36:74:a9:58:ac:de:62:a7:e2:fa:03:e8:1a:d9:
9c:05:9d:81:9d:59:59:95:03:f8:5e:a8:79:8d:c4:
63:02:87:df:46:64:18:21:bb:d9:ce:e8:9b:76:c8:
3e:0c:cb:08:ff:a2:74:2d:93:2b:c3:1d:aa:5c:62:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/22
185.139.218.0/23
195.189.144.0/24
212.46.44.0/24
IPv6:
2a12:b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43500
50651
Signature Algorithm: sha256WithRSAEncryption
8e:fe:ab:b8:88:7a:10:4f:b9:45:db:fb:7b:8e:71:96:6d:47:
7a:c4:7f:48:0c:d1:36:59:9b:3d:e9:be:58:ad:48:6a:5f:a6:
86:9a:7f:85:9d:32:93:91:5c:fc:8e:d4:45:50:e4:c2:5d:9d:
f7:6d:06:e5:06:70:3a:f3:2c:b9:f7:7b:95:4c:61:c8:fb:8f:
9f:bf:98:a7:dc:04:a8:ee:5a:c4:b0:ba:59:df:61:9a:c5:a2:
b3:93:bc:95:ef:ba:a0:42:28:1a:df:e6:8b:8c:b8:7e:75:a3:
38:d0:04:f2:0b:1f:91:2e:dc:9b:8a:a8:15:02:cc:ba:92:30:
4a:12:56:58:dc:81:f5:7f:6b:33:ba:67:b5:83:d6:df:48:23:
c7:a3:61:33:a6:ef:4b:ad:7d:cf:be:f0:d8:99:a0:11:1f:90:
39:f3:de:28:b9:c5:b3:9c:d8:7a:4c:f3:31:19:95:7e:47:ae:
1d:67:23:8d:84:ff:fe:76:bb:d8:77:e4:23:5b:e3:c2:fd:ab:
6f:b4:f7:d7:00:f3:8d:6f:04:d4:3a:9c:10:d0:f3:59:83:90:
16:69:33:50:00:ef:60:1a:8a:99:d5:ca:36:5e:86:9d:b3:c0:
65:a1:52:ce:a6:83:0e:ab:24:e3:28:d2:5c:2b:d5:7b:a4:52:
d7:07:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:55:56 2024 by rpki-client on console-ams.rpki-client.org