Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer (raw, json)
Hash identifier: hzQS5rUpZa2hffx+l/kr1bwTyj86GAtMRh0V6LzkGZw=
Subject key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F7718278EFBCABEFA10F773BACDB56184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 May 2024 12:33:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.159.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:18:27:8e:fb:ca:be:fa:10:f7:73:ba:cd:b5:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 14 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:e5:2a:28:80:d6:40:8c:ee:14:93:29:03:
58:a9:f0:c9:d9:b3:4b:e8:07:fd:45:7b:cc:ed:52:
75:2d:ac:18:5d:23:0f:8c:f5:0c:31:8a:5b:89:0b:
8e:b0:5f:66:7d:2a:0d:a7:13:d8:1a:b0:a6:04:8c:
1f:d4:a3:ce:7d:4b:b5:d5:a9:ab:d5:a9:79:09:19:
56:2a:15:57:b9:ff:92:57:dc:b0:6a:c7:6c:2f:13:
92:e2:bc:fc:85:49:6d:2e:83:70:55:b0:39:f1:20:
da:18:f3:10:04:05:73:5a:33:7d:aa:ac:c7:f7:82:
75:11:a9:5f:9a:65:7c:5e:0a:58:80:41:2f:d4:12:
d4:89:36:16:ff:33:17:5a:fe:e8:f9:b0:81:dd:a1:
3a:d6:cc:f2:1c:93:e2:df:65:06:a1:fd:da:86:fd:
49:41:4a:2e:86:d9:42:0c:0e:95:dd:34:58:fe:11:
65:f5:20:f9:b7:0d:07:a3:19:f8:80:8d:b7:e4:34:
6b:e8:9a:21:72:3c:e9:95:8e:62:94:0c:f1:43:10:
21:ad:db:4c:eb:0d:5f:49:9a:28:dc:b7:df:2e:59:
6c:0a:05:12:59:07:41:14:11:e0:b2:8f:98:1f:e6:
11:51:a3:bf:9a:0a:29:54:53:56:75:ba:07:1a:64:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.100.0/22
Signature Algorithm: sha256WithRSAEncryption
16:8f:fd:39:ae:34:90:c3:0f:6a:9f:be:48:ac:2d:c3:87:ec:
5f:47:e4:e9:3c:55:c5:7f:19:72:a0:87:b9:58:a6:5d:98:5a:
74:a5:94:cf:3b:e0:6b:75:f4:73:a1:d9:ab:4c:ea:75:b2:02:
70:36:84:4c:ec:c0:0c:5f:22:ec:25:db:dd:8c:2b:5f:98:a6:
5c:a5:d2:f3:df:57:dc:ee:ca:fb:9b:22:d8:4e:12:aa:ad:c9:
f0:80:fd:90:1b:80:37:a3:00:93:ec:44:89:2d:8a:e7:f5:59:
93:dc:91:7b:6c:53:0b:61:77:ff:a6:ef:f2:93:88:1e:ee:d5:
33:1c:ab:97:17:c6:a7:99:48:86:91:05:c3:22:cf:1d:8c:39:
1d:af:6b:13:bc:73:79:e4:b8:93:bc:ed:93:3e:00:1b:f0:23:
e9:c6:c6:a0:17:eb:2d:fb:68:49:b9:50:cf:4c:96:e0:e9:c0:
38:22:56:b2:44:4b:21:c0:1e:10:32:fd:11:56:18:40:0f:73:
42:6d:70:88:a8:96:83:84:7e:81:e6:f1:64:dd:f4:a0:1c:5b:
7f:2c:78:dd:96:f5:95:52:46:72:50:1c:c2:e7:ca:5c:ec:51:
46:53:a0:ae:5c:5c:d9:40:38:02:33:dd:97:a8:7d:73:c2:a5:
93:0a:54:c9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY93GCeO+8q++hD3c7rNtWGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTE0MTIzMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2NhYWIwYjBkZWZjOTNjMzJmODBjNDRiMDgyZmIyOTA1ZjIzYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xflKiiA1kCM7hSTKQNYqfDJ2bNL
6Af9RXvM7VJ1LawYXSMPjPUMMYpbiQuOsF9mfSoNpxPYGrCmBIwf1KPOfUu11amr
1al5CRlWKhVXuf+SV9ywasdsLxOS4rz8hUltLoNwVbA58SDaGPMQBAVzWjN9qqzH
94J1EalfmmV8XgpYgEEv1BLUiTYW/zMXWv7o+bCB3aE61szyHJPi32UGof3ahv1J
QUouhtlCDA6V3TRY/hFl9SD5tw0Hoxn4gI235DRr6JohcjzplY5ilAzxQxAhrdtM
6w1fSZoo3LffLllsCgUSWQdBFBHgso+YH+YRUaO/mgopVFNWdboHGmSRcwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBzKqwsN78k8MvgMRLCC+ykF8jxiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzc4N2Fh
ZS0xMTMxLTRkOWMtODU5NC02OTQ3ZjAyYWM2YWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNzg3YWFl
LTExMzEtNGQ5Yy04NTk0LTY5NDdmMDJhYzZhZi8xL0hNcXJDdzN2eVR3eS1BeEVz
SUw3S1FYeVBHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuZ9kMA0GCSqGSIb3DQEBCwUAA4IBAQAWj/05
rjSQww9qn75IrC3Dh+xfR+TpPFXFfxlyoIe5WKZdmFp0pZTPO+BrdfRzodmrTOp1
sgJwNoRM7MAMXyLsJdvdjCtfmKZcpdLz31fc7sr7myLYThKqrcnwgP2QG4A3owCT
7ESJLYrn9VmT3JF7bFMLYXf/pu/yk4ge7tUzHKuXF8anmUiGkQXDIs8djDkdr2sT
vHN55LiTvO2TPgAb8CPpxsagF+st+2hJuVDPTJbg6cA4IlayREshwB4QMv0RVhhA
D3NCbXCIqJaDhH6B5vFk3fSgHFt/LHjdlvWVUkZyUBzC58pc7FFGU6CuXFzZQDgC
M92XqH1zwqWTClTJ
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:14 2024 by rpki-client on console-ams.rpki-client.org