Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer (raw, json)
Hash identifier: 3wgBX/Q1MHMcADqpbCmQ4TvSNrLspDvG6xltmIAnxR8=
Subject key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79543A49DF3BB5085686A6C9A13CF23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203753
IP: 185.125.32.0/22
IP: 2a06:b780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:43:a4:9d:f3:bb:50:85:68:6a:6c:9a:13:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:9a:6a:f4:ad:47:2c:24:13:ca:28:f7:39:
c8:f7:87:09:30:aa:a7:15:f7:39:a1:0f:d3:26:23:
85:5e:ac:e6:1d:fe:d3:06:f8:15:e6:43:2e:25:90:
10:73:4a:a7:73:c6:d1:af:ff:19:83:79:1b:8a:ba:
60:35:95:9c:ba:e6:7b:e6:14:e3:a6:e7:5a:a6:65:
8e:30:c0:87:ea:dc:51:86:93:51:72:67:60:92:fe:
19:46:21:a3:ce:4c:6e:49:4b:54:47:36:17:b6:16:
bc:38:65:8f:d2:69:b0:d1:5c:0f:a2:50:5b:0d:a5:
81:d6:c4:a4:2f:27:28:5f:e8:c8:50:81:7c:cc:96:
16:77:e8:b6:58:b3:45:d9:7a:01:18:f5:76:a6:66:
f5:a0:33:67:a8:ac:46:7c:d7:0c:82:a0:90:64:b0:
c5:49:04:7e:9e:13:f2:44:68:f9:d2:e8:d1:69:7e:
b7:30:4f:e7:8c:ac:5d:02:eb:59:c0:a5:e9:1d:a8:
aa:6b:dc:65:11:38:00:4b:5b:75:06:19:a0:6d:3d:
75:9c:6c:0f:eb:e9:69:20:16:e1:cb:c1:c4:c5:a2:
44:2e:2a:b1:1c:4b:60:55:f7:2b:2a:b3:ef:bb:a1:
6c:28:77:b9:60:6c:6f:5f:cc:6f:10:37:b4:b0:55:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.32.0/22
IPv6:
2a06:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203753
Signature Algorithm: sha256WithRSAEncryption
60:13:dc:19:2e:ce:31:0b:ef:16:74:18:20:1f:f2:22:f9:5c:
b0:5c:29:29:7f:30:72:33:f4:1b:8a:5b:c8:21:cb:6b:60:0c:
a7:80:08:e8:81:a7:5e:3a:bb:54:31:79:e8:f8:cc:09:6b:5a:
6e:8c:ab:98:ac:23:e2:91:f1:3f:bd:7c:ab:38:f7:9f:85:7c:
b1:3d:ee:c6:b8:08:53:38:fc:84:2c:b0:f5:8c:32:8d:85:d3:
f4:bf:d9:5d:8f:05:0c:7c:ac:d2:26:4a:f7:39:25:25:2a:81:
e7:aa:ff:4b:3d:6f:5a:a5:5a:d1:9f:ba:89:50:a1:4e:41:63:
d3:e5:8b:0f:60:fd:a9:0a:90:3e:a4:c5:b2:3e:27:b3:14:2e:
0f:7a:63:2a:4e:22:da:ab:6c:95:dd:8c:24:26:8f:54:46:15:
60:b6:d7:ef:24:bb:ae:13:a6:07:c0:95:b4:ed:c9:af:46:59:
18:d3:74:e5:53:d9:8d:52:bc:3d:6b:6e:7c:20:26:f4:e1:9f:
46:46:e6:ac:27:93:95:7f:86:96:26:5c:06:3e:ac:b4:69:40:
0e:8b:41:a9:62:23:0d:52:e0:8e:27:1a:7a:1d:3d:2f:1c:fc:
d6:4e:ee:f4:59:3a:f8:2e:eb:a6:40:ea:29:b8:bb:77:6b:ae:
57:ca:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 15:09:02 2024 by rpki-client on console-ams.rpki-client.org