Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
File: HMIQHIyT1FjSXDElyMm8ya8TKHE.cer (raw, json)
Hash identifier: oPp9qvBVh4KR6xlmSBtqnkBweJQJW5b4jK49enURRVY=
Subject key identifier: 1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01902B49E2166AC2E5BAD249D2542F136C0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jun 2024 12:19:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214693
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:49:e2:16:6a:c2:e5:ba:d2:49:d2:54:2f:13:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 12:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:7e:16:ad:2a:55:ce:e6:cf:af:f3:38:b5:
6e:9b:35:24:c8:4a:ac:62:86:9a:82:44:a2:27:86:
a6:2f:fb:a2:d7:2c:cc:42:7f:84:1e:79:59:99:c8:
23:02:8a:e1:f3:bd:6c:86:55:e5:80:a4:d3:5c:c7:
14:92:f8:f2:b9:a5:52:bf:ab:2d:33:f3:63:ce:f4:
1d:a8:81:dc:0c:bf:da:a7:f7:55:ca:cb:77:b6:ff:
c8:a7:cd:7d:c6:ed:08:83:eb:84:c2:44:60:3b:e5:
fd:7a:42:7c:25:a7:11:85:16:59:b0:8c:4b:1a:cb:
29:da:94:06:34:5a:82:19:ab:bc:2d:6e:67:92:e9:
68:ce:90:8a:ab:d5:ed:ff:b6:71:d5:a1:8e:96:4b:
fd:64:46:60:e7:9a:6a:37:fa:9a:28:96:bd:8b:df:
ca:28:0e:bf:fb:9d:ed:43:ad:71:5e:27:f4:ef:88:
5e:b3:4b:fb:df:31:b6:9a:91:5d:ba:6e:e5:b4:00:
a2:a1:24:c7:f9:21:f4:bc:7f:87:f8:75:54:8a:bd:
0d:0f:c7:11:bb:d9:97:80:ba:37:b5:4c:4c:4d:69:
3e:be:01:38:1f:74:b0:6b:90:fe:c5:52:23:a7:a6:
df:96:94:00:3b:3b:74:e0:bf:68:1a:a7:d9:a5:03:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214693
Signature Algorithm: sha256WithRSAEncryption
4c:64:ce:19:68:1a:56:66:65:46:9d:53:37:ea:10:fc:47:28:
18:dc:63:9d:2e:b6:02:7f:d9:c9:40:7a:d8:2d:55:6b:b5:f7:
58:09:1a:c3:46:50:af:50:b2:15:1a:86:8c:95:e5:be:e9:e4:
77:28:46:36:6c:cb:d0:bf:85:fa:38:e9:69:82:90:09:58:2e:
53:f8:32:a2:7a:f9:f2:69:fc:b4:45:20:e5:3f:f9:6b:0b:d4:
83:ab:e0:34:db:58:4a:42:1c:c4:2b:41:33:8e:63:00:1c:d0:
c7:3e:ec:5f:8a:d1:3a:f7:77:7c:44:58:97:7c:8c:8d:27:67:
de:05:5d:3a:98:01:b3:fa:c6:ad:a6:44:44:23:0d:5e:e0:9a:
cb:f0:79:bd:7d:84:0e:09:99:e2:5a:84:7c:4f:3d:e2:d2:3d:
47:3c:3c:28:df:b3:02:27:46:1d:ad:d5:91:0f:13:70:07:18:
d1:0e:73:3f:9a:01:a8:ce:ad:6d:ec:7c:3d:ad:8c:1e:fb:a5:
4c:09:59:cc:81:c6:86:f9:a7:4a:4a:9c:5c:dc:26:4a:5a:f7:
73:2d:b8:ef:59:e8:c6:bc:d1:d8:97:23:b6:2a:28:42:56:f4:
ca:fe:f7:f1:9e:ce:cc:b6:93:23:0c:66:ee:0e:c5:16:38:f9:
da:19:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:14 2024 by rpki-client on console-ams.rpki-client.org