Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.cer (raw, json)
Hash identifier: PLpgOylSYD9c6DYagYRy3UDQYPT3+/0GyKiPehw4VgM=
Subject key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79378012C132F78560F0929A2CEFA13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198930
IP: 91.106.128.0/18
IP: 170.133.0.0/18
IP: 185.78.60.0/22
IP: 185.161.144.0/22
IP: 2a07:c540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:78:01:2c:13:2f:78:56:0f:09:29:a2:ce:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:46:5f:fa:75:1a:6e:1e:8c:da:01:cf:e2:
fc:e4:59:1d:b1:b8:f1:b5:14:92:97:6c:a3:75:46:
10:0c:c6:7f:30:72:9c:1c:41:a7:76:98:5c:4f:fb:
75:12:7a:43:1a:26:ac:30:b5:db:f0:9c:71:ab:59:
d0:1c:40:6b:9b:87:5f:da:7d:00:c0:f5:b6:17:31:
be:7f:42:e8:3a:b4:9c:6f:a5:90:ae:75:80:21:e3:
52:dd:d1:b6:80:7d:d1:49:25:5f:80:49:e3:51:e3:
15:1c:1b:3e:b3:2c:cc:89:3c:fe:73:3b:05:80:cb:
7a:4a:a9:94:31:d3:70:49:78:24:ff:32:10:52:3f:
2c:b1:87:0a:c1:5e:d2:04:3f:20:a0:78:5f:3c:7a:
bb:a0:a7:ce:28:cf:e8:96:a9:6d:1c:33:39:c2:28:
82:93:9e:1c:07:14:40:f0:ea:fd:cd:4e:3b:a0:da:
ef:f8:93:37:bb:39:fb:0e:f1:92:70:75:31:2a:04:
7c:a3:2f:34:47:83:1a:5f:53:84:13:ea:23:21:2c:
fc:44:48:5f:92:d8:20:00:02:05:8c:e9:d5:c3:36:
1a:23:41:71:26:58:34:39:c1:2c:e3:e7:47:1c:6a:
45:16:6f:e9:9a:c8:fe:35:0c:fc:02:64:f7:f7:1c:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.128.0/18
170.133.0.0/18
185.78.60.0/22
185.161.144.0/22
IPv6:
2a07:c540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198930
Signature Algorithm: sha256WithRSAEncryption
50:e8:2a:f5:ed:bc:87:ed:1a:41:f8:40:5e:38:c7:59:4c:c8:
d9:63:52:75:ee:37:a5:9f:dd:a7:07:bd:35:3b:bd:a3:b9:32:
44:79:22:e3:16:d9:7b:5b:13:57:2c:94:ce:32:3b:dd:d7:9e:
7a:f3:a7:6f:3e:96:49:e1:0c:ae:73:14:38:37:c5:5c:af:7e:
93:3c:2c:db:6c:bb:de:5b:54:90:f5:38:da:08:a1:a0:0c:7c:
5e:d4:9c:93:91:06:82:37:59:77:f4:94:9e:4a:83:91:ff:71:
15:0a:c1:7d:45:36:86:b3:c4:5a:94:14:7f:c1:5e:f8:a0:5f:
14:48:e2:fd:61:9f:b2:b5:dd:a1:a1:64:1c:d8:f9:89:79:95:
bb:e5:50:31:cb:ac:eb:d5:2e:03:e5:29:38:34:84:af:11:35:
4b:4f:f3:ae:0f:a1:61:3d:66:1d:5c:6e:d5:ea:97:7a:2e:6d:
a8:9f:57:74:57:c7:3a:90:01:d1:3a:2d:5e:28:2b:fb:77:90:
fb:89:5a:0a:82:4f:de:2f:2b:6d:11:99:cb:2f:09:75:fd:8c:
89:30:af:cb:f4:81:5e:c2:2c:ce:0c:9e:d8:c3:56:be:13:e4:
eb:ce:ab:a6:08:fb:28:66:64:ec:8d:a7:43:f5:dc:77:ee:05:
05:82:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:22:33 2024 by rpki-client on console-fra.rpki-client.org