Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
File: HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer (raw, json)
Hash identifier: TAhtnnvg/USHA/wgEwlsX5nDgdAYCDqyqh/uHJp5oDo=
Subject key identifier: 1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F7ADFD1A3ED71C3FE13A719AFD33F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213760
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7a:df:d1:a3:ed:71:c3:fe:13:a7:19:af:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:43:ff:a3:3e:53:00:12:a5:4d:5a:a5:c9:28:
5b:12:3c:a4:f7:89:ce:33:d4:1a:b2:d9:75:4b:5a:
59:91:78:42:3d:da:8d:e8:b5:39:8d:a7:92:b0:76:
24:eb:9d:23:68:ae:79:c7:95:36:e3:dc:48:94:09:
13:41:63:ed:b8:11:10:d6:1d:34:01:ba:dd:c6:99:
3a:f2:dd:c0:a5:21:4d:97:f8:fa:78:b8:c6:c3:f7:
de:a0:99:ae:2c:4d:5b:29:83:64:c5:d9:13:5e:77:
d7:e1:5e:f7:2d:a8:92:4a:11:7a:19:62:27:a7:93:
72:4c:21:56:5c:45:c7:0a:3b:98:f2:b5:19:34:3b:
58:bd:df:2e:ce:d3:ee:3b:73:95:76:7e:dc:f6:9e:
86:7c:0a:1c:6c:b4:e2:5e:e8:ee:07:a6:e8:09:f3:
24:8e:a8:6b:65:a4:c6:59:6b:54:97:0b:7a:9a:42:
ab:a0:77:75:96:6d:1d:0a:bc:ea:16:f2:73:6f:7c:
cf:d2:3c:18:ec:cc:a6:57:29:8e:8c:16:9c:61:04:
f0:ea:f6:84:2d:b8:25:a6:7f:d3:66:d6:ed:34:16:
ac:e1:65:80:ad:5b:aa:0d:11:0e:d0:9a:a5:92:6f:
37:67:4d:4c:26:cf:dc:ca:0d:93:b1:70:7e:13:4e:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213760
Signature Algorithm: sha256WithRSAEncryption
39:f2:63:a3:a0:76:7b:2c:96:d8:12:40:ff:5a:6d:4c:aa:e7:
67:9d:4d:5b:0b:9a:d6:40:42:ed:10:32:4b:4d:31:60:87:7c:
bf:c3:e9:8b:65:12:16:cf:c5:ec:29:d5:52:4d:85:4b:75:6e:
e4:61:7a:d8:15:52:36:0e:42:4a:bf:47:83:dd:c0:7b:81:62:
1a:7e:ca:cf:53:8d:a8:7b:e5:f5:3a:ac:58:ed:91:e2:ae:14:
52:3b:98:45:4f:47:db:8e:ba:b1:a9:dc:ed:e8:21:d8:7a:9d:
47:68:ad:b7:af:de:74:3c:0f:ca:d6:a0:de:e3:67:7a:9d:15:
4f:0b:84:66:b9:02:73:b2:f8:00:f0:f3:89:50:50:2b:5c:85:
ba:8b:a5:74:1b:f4:87:0c:6c:1c:74:c8:a0:35:fd:30:02:9b:
77:b4:29:79:9a:34:d3:81:09:c3:27:d4:ca:3a:91:20:7e:37:
f4:27:12:4e:d1:3e:3f:02:54:c0:c7:05:56:22:29:1d:1d:b2:
5a:cd:7a:37:ef:c2:31:a6:4c:77:64:b3:b6:0b:61:fd:3d:64:
e2:88:47:4f:3c:62:18:ca:00:ae:96:ae:8e:5e:ca:fb:9c:78:
f8:8e:18:03:75:95:46:c9:4b:51:8b:3a:84:42:63:fe:c9:ff:
c3:94:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:33 2025 by rpki-client