Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.cer (raw, json)
Hash identifier: +jlMUvm7MhSFUmcaHQpJKeJW15GiV00RxPkMvORzQgE=
Subject key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC725814534EBCEDE0F35BCA0404C1A7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51257
IP: 171.22.146.0/24
IP: 2a05:d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:81:45:34:eb:ce:de:0f:35:bc:a0:40:4c:1a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:15:0b:95:59:07:18:1d:95:55:66:d1:ca:
eb:66:ff:3b:55:97:26:44:17:da:59:ee:d4:48:cc:
a6:6f:76:6c:8e:bf:7c:2b:37:19:29:de:b5:23:3b:
e9:df:f4:9c:3a:c7:8f:5f:a5:01:7d:91:0a:92:c7:
e2:1d:8e:1f:7e:fe:53:a2:80:74:56:1e:f3:58:51:
43:5a:eb:46:94:c4:b7:30:98:61:82:96:85:e1:d7:
fe:e6:3c:83:7a:d3:76:cd:23:2a:e4:6f:1e:b6:ac:
ce:9f:ff:87:44:38:6f:cc:a3:bf:10:4a:b6:c1:22:
cd:2d:7c:3f:5b:6a:60:71:d7:e0:ea:f0:bb:5b:67:
bb:36:0a:b2:8e:4a:43:02:71:4a:3d:ac:4b:9b:9e:
7c:69:4d:0b:a9:1a:f0:5a:97:62:67:a8:85:96:e6:
31:d2:af:42:20:52:6c:c9:73:ec:e1:8f:61:d1:cc:
93:95:e3:64:ac:c0:51:86:49:71:14:fd:8f:5b:51:
7b:dc:0f:06:30:ba:4f:09:a3:32:26:43:a4:77:78:
1c:0f:ff:fa:b6:ed:4c:c1:93:c8:32:78:a0:9c:a7:
b8:13:1e:18:d0:b9:46:2a:e5:50:a4:96:14:7d:a0:
0e:3c:d5:91:66:2f:42:33:10:ff:69:32:0b:70:09:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.146.0/24
IPv6:
2a05:d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51257
Signature Algorithm: sha256WithRSAEncryption
63:8b:8c:d4:f0:c1:6d:14:1f:2c:3f:e0:40:50:10:c8:56:2c:
b1:23:a2:0a:fc:3d:c4:ca:b3:71:94:91:77:d8:23:96:9e:33:
0b:da:4e:04:79:a4:0e:60:ef:d2:a7:a2:a2:88:90:ec:01:95:
3b:b6:9b:0e:4a:ae:51:58:9b:13:bc:1c:85:f1:d1:41:36:21:
b4:46:ac:65:b7:0e:45:c5:9b:54:50:ca:d2:8e:38:39:61:89:
11:61:1c:18:27:3b:7c:ad:0f:f6:7f:c6:7c:33:a7:62:83:cf:
dd:b2:23:d1:2b:c1:5e:6e:6f:3e:42:36:ae:64:a9:93:80:66:
d3:a5:c5:ba:5f:71:0a:11:25:72:d6:33:86:de:46:3b:1a:fd:
43:59:d7:59:fa:8c:35:61:6c:e8:46:df:df:99:b1:53:88:45:
19:21:a3:f5:93:8b:b0:f4:b5:a3:49:41:84:70:b9:b5:8c:c3:
9c:0a:00:51:7e:f9:f1:3e:ea:7e:09:ca:64:19:b5:30:3e:1f:
fd:81:26:4f:94:49:0c:99:e7:71:15:2f:d2:2b:8c:f5:7f:fd:
48:8e:34:e2:b0:fc:2c:65:77:48:a5:a6:f4:b5:df:1c:05:ab:
17:3f:e8:64:7e:57:6d:6e:16:64:95:c6:01:a8:f1:28:9b:1c:
5c:dc:b5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:01:20 2024 by rpki-client on console-ams.rpki-client.org