Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
File: HLQJLqLRKW3-YdeKffs8HgORZAg.cer (raw, json)
Hash identifier: QpKiBamEqqTYbJjZHdiLNi4XzG99G6YcZoPBOkZWyvM=
Subject key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEEA58E49BF006C12E784969A6AB8CB9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 14:34:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203071
IP: 45.147.94.0/24
IP: 213.134.4.0/24
IP: 2a13:4e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:a5:8e:49:bf:00:6c:12:e7:84:96:9a:6a:b8:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 14:34:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:93:90:38:15:97:63:bb:86:e2:94:02:60:
c5:bc:ed:84:5d:d4:09:b4:d3:90:fb:07:0c:91:7d:
6e:68:19:8a:b7:fe:61:81:e6:7b:76:0a:97:b8:dc:
91:15:25:45:73:e1:6e:78:d3:21:aa:07:ab:19:3d:
04:4f:83:da:b1:cb:42:10:c5:26:be:9b:69:c4:6c:
40:fc:4b:7d:e9:e4:1b:64:fa:9d:85:bd:94:8b:a1:
2c:88:43:33:87:32:9d:5e:aa:fb:08:1e:61:ce:2e:
5f:85:7b:3a:9e:fe:3b:1a:5a:b9:d5:b0:01:f6:30:
42:fe:43:27:34:41:97:7a:ff:16:44:c8:97:0d:42:
04:84:38:63:91:8c:ad:52:92:61:1f:4b:09:fc:b1:
fc:df:67:14:2c:22:7e:20:27:16:24:1d:49:8c:84:
fd:d2:6e:8e:e6:f1:ca:0c:64:0c:35:4c:87:a4:ef:
30:57:14:81:e1:c4:9f:1a:95:c8:70:b8:9a:24:7e:
af:f6:7c:fc:03:4d:6d:74:60:b7:14:dc:49:27:f9:
d2:88:b0:4a:46:0a:55:4c:2d:1c:99:29:c3:41:5d:
6c:86:55:73:b4:09:5e:1f:83:5a:14:72:74:66:79:
7d:d4:e7:39:da:2b:b5:49:de:30:14:2f:e1:6c:d2:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.94.0/24
213.134.4.0/24
IPv6:
2a13:4e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203071
Signature Algorithm: sha256WithRSAEncryption
ae:8f:05:24:b9:fd:8c:09:e8:cc:58:41:dc:1b:52:7e:bb:d0:
e1:1e:00:e3:94:6f:e2:69:09:bf:77:93:6f:33:fd:2c:38:25:
ec:52:ee:60:d8:73:51:98:e0:96:95:a4:4d:44:c1:12:78:ff:
d9:ef:49:ef:be:75:a3:4d:1d:13:61:a8:9a:3d:83:59:dd:ce:
67:e5:e4:4c:c3:42:75:0f:ac:4d:07:e9:fe:33:18:37:87:df:
5f:10:a6:46:be:bd:83:3f:e0:16:2e:70:a6:16:79:4b:d2:61:
06:47:4c:04:2e:9f:d9:0a:5a:c1:d7:22:f9:a1:0c:d3:17:40:
d9:2a:1a:29:ac:85:e6:59:a0:ea:8a:1c:17:ab:ff:77:ad:14:
6c:24:18:61:de:29:cf:ad:88:88:2b:91:b8:6e:43:f8:4d:78:
7a:40:7a:96:09:1e:54:8a:95:9a:2a:f7:23:97:71:ab:f9:35:
7b:8f:89:bf:5d:d5:4e:c0:68:62:04:15:e9:fe:dc:44:bd:de:
78:21:b1:33:d4:fb:e2:3d:83:95:51:a2:91:04:fe:dd:63:bc:
aa:7e:76:ac:89:9d:87:1f:5b:ff:d0:3f:80:de:c2:a7:53:3c:
23:21:62:bf:02:c5:98:62:97:db:3d:7f:4c:2f:94:29:1c:73:
0c:f3:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:59:00 2024 by rpki-client on console-fra.rpki-client.org