Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
File: HVS-eciStTVr8be80TE5fywjrcA.cer (raw, json)
Hash identifier: cKS9YK2siyDxADGE6AzPNxx6gxHZ8cDkmJ+8utU5j/k=
Subject key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AEB1E25C036B1AD4093725FDF3814
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.248.164.0/22
IP: 2a0d:ed80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:1e:25:c0:36:b1:ad:40:93:72:5f:df:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:0e:d8:06:be:ec:fe:44:82:71:d8:f6:66:
83:97:b5:13:36:94:a2:f8:de:d7:8f:de:a8:32:09:
e6:4a:13:71:1e:bf:13:44:2a:8c:c8:48:69:7b:33:
13:fe:9e:43:c2:f3:3c:01:b0:29:fc:fb:9e:19:72:
74:42:84:6d:b1:d1:e1:76:f6:7d:12:76:2b:48:65:
67:ac:f4:76:64:03:cd:78:12:d8:6e:0f:cf:b4:14:
a5:8f:d2:6f:d4:bc:80:ee:40:75:f0:68:13:60:ca:
1f:b6:93:65:e8:ff:6b:16:81:23:1e:aa:e5:32:b4:
d0:e2:75:4d:c4:19:60:3f:6d:a9:46:71:41:33:55:
9e:f2:4e:4c:1e:47:83:00:81:63:6d:22:95:98:5d:
7e:8a:5f:80:f0:83:a4:6d:1a:da:ec:ec:31:41:85:
14:e8:d5:c7:21:d0:e0:17:b1:16:0d:3b:5b:6b:be:
c9:ff:d8:50:45:81:bc:51:62:6d:f5:88:1d:3d:28:
ca:96:2c:4f:18:26:56:99:94:9f:02:6c:cf:b7:df:
d8:94:50:5e:54:09:f2:31:1c:1c:95:32:9f:76:8c:
21:b3:8d:1a:c8:25:4f:16:ea:f1:10:65:1f:33:57:
97:8f:0b:46:fe:51:b1:4b:95:5e:e0:6b:0e:6e:5d:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.164.0/22
IPv6:
2a0d:ed80::/32
Signature Algorithm: sha256WithRSAEncryption
91:b3:ae:0e:41:4d:4b:e5:79:2b:6e:90:cb:f8:0e:50:9d:a1:
a6:a5:e4:c9:8d:41:72:08:47:d5:4f:9c:b4:94:80:0d:4c:83:
e7:49:dc:19:63:d6:37:a8:7f:22:e9:d1:e6:f8:c5:d7:43:ae:
07:fd:06:8d:82:e6:ca:86:ef:a9:8b:1f:d3:aa:a5:b1:da:f4:
dc:56:20:b5:fd:52:bd:f0:ba:f8:30:6f:5a:82:83:48:80:24:
44:9f:9c:76:02:02:e3:f4:e6:9c:b8:75:a3:c6:8e:64:9e:c5:
0b:54:ba:b1:1a:36:aa:7b:5d:28:ec:53:7d:0d:e8:14:33:83:
a5:fd:1e:c5:d3:21:65:95:fd:29:61:7b:d3:be:60:f8:3c:9e:
35:2d:da:97:81:2b:63:2c:46:bd:80:ac:b6:62:67:91:53:0a:
c3:58:15:1e:0e:d2:c7:5b:81:f6:b6:9a:ba:a9:af:ca:80:a5:
a1:5c:35:a0:f5:cb:49:18:66:f7:a2:d1:76:3e:82:5e:7f:b5:
5d:d1:94:4e:d6:33:10:d8:93:de:fa:0f:ee:9d:21:4f:36:d6:
59:fc:ed:11:b0:a5:fe:79:56:ff:f1:d3:a3:a1:78:fb:3c:7e:
16:9d:7b:f7:43:c3:54:cb:66:af:6a:ee:8d:19:19:83:a0:7f:
ce:2a:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:24:19 2024 by rpki-client on console-ams.rpki-client.org