Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer (raw, json)
Hash identifier: NZ5M30+BfjF4i5t5YIvhB+1R2whLePAMKaBoc30WLAE=
Subject key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938D1D84C88C3EBE9CCD7AEB4BACE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51205
IP: 185.119.197.0/24
IP: 2a12:9140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8d:1d:84:c8:8c:3e:be:9c:cd:7a:eb:4b:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:85:be:30:60:07:a9:c1:f4:f8:20:33:f9:
72:de:9d:05:db:05:16:78:2a:7b:33:20:09:8a:76:
af:37:b2:d0:03:03:cd:3e:42:18:c9:7a:85:97:c4:
a1:d6:fe:79:71:a6:1d:e6:25:c9:a3:3e:e2:79:5e:
36:9d:49:64:dc:99:17:18:43:b4:65:fc:9b:b2:a8:
fb:97:a8:f0:9b:3c:00:23:86:10:0c:38:15:96:a3:
e7:8a:1a:37:46:fb:ef:56:1b:38:0a:74:ce:a1:97:
64:64:8e:63:8c:77:9c:9b:99:87:78:15:1c:2b:d0:
53:15:f6:f1:e9:cf:9e:10:f6:69:9a:4d:70:84:17:
7a:21:96:d0:a6:d0:f5:e2:97:a4:a9:52:8b:92:cb:
69:1b:de:82:f3:f7:c1:28:a4:13:56:61:61:e7:f7:
a1:ea:39:e8:c9:2d:20:d9:f5:9c:32:27:f4:c1:b1:
3f:4c:ca:35:f8:f8:bc:a9:d7:59:72:9e:91:6e:9c:
83:dd:b0:44:f7:d3:3c:6c:e1:6c:be:cf:3e:d5:46:
96:37:c4:0b:de:a8:7c:6d:46:80:f0:5c:e2:87:65:
06:b4:83:c2:4c:40:2b:b3:a9:dd:88:1f:92:f6:82:
2c:5d:c5:90:23:ca:6e:91:86:f8:b3:5e:a3:d6:1a:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.197.0/24
IPv6:
2a12:9140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51205
Signature Algorithm: sha256WithRSAEncryption
02:c3:50:47:97:4b:50:7a:69:2c:47:08:43:43:57:4d:70:3e:
6a:61:b6:5f:8a:6e:10:06:dc:0b:ab:4a:00:43:7f:67:cb:52:
a7:22:85:eb:83:83:e1:7b:b0:6a:3a:1e:24:9a:c1:78:eb:f4:
b8:3c:e5:ed:48:34:ec:8b:09:5a:50:67:f0:92:7d:b0:88:97:
90:40:85:d4:a7:8e:78:f5:16:cc:48:ff:e8:c2:1d:c5:04:45:
b7:2b:55:0e:f2:56:09:e3:67:95:16:ff:6d:5c:5d:e1:7b:1c:
2b:76:e4:b8:3c:95:38:21:d5:c2:ef:0a:57:cd:ba:f4:b9:c8:
54:6b:1c:58:b9:74:92:c4:5f:5b:70:26:ff:ed:d7:a5:ba:82:
82:52:cf:9a:f9:82:71:8e:ad:60:c2:f1:57:44:37:d9:9c:d2:
8a:22:c2:d9:09:80:1c:f7:ae:b7:56:17:8c:f3:31:7d:45:77:
4c:1e:7c:9c:73:a6:ea:ca:ce:ef:ab:45:3e:24:d2:d0:27:37:
8c:12:3a:2f:08:fd:02:ee:51:de:7b:aa:7c:f6:9f:bd:bf:9d:
f1:75:dd:43:1b:bb:60:c1:ad:27:32:42:82:5c:3b:09:16:4b:
62:25:c6:b3:03:07:f3:a5:51:cf:da:35:bb:9c:ff:32:b5:56:
fe:c2:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:22:24 2024 by rpki-client on console-fra.rpki-client.org