Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.cer (raw, json)
Hash identifier: diStp8DzYNMrRzC1SORyKWl65nikTcZmSRvh16U2mEc=
Subject key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCF3AB348668847B47145D825466A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21235
IP: 185.65.4.0/22
IP: 193.108.193.0/24
IP: 2a03:16e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f3:ab:34:86:68:84:7b:47:14:5d:82:54:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:7b:86:b6:da:78:c0:f6:14:ee:f9:f7:d7:
d9:93:02:67:6a:8b:c2:6c:0a:82:c5:0d:47:50:0c:
5c:ae:3b:ca:03:0e:f2:b4:a0:d9:d3:ef:42:2b:b6:
57:98:91:f9:2e:da:6b:4f:17:eb:38:58:93:10:54:
57:a6:ee:a8:f3:76:7c:9e:a0:8b:d8:f3:90:99:fb:
ad:a7:b6:6d:33:18:71:a1:0a:71:5c:83:84:dc:70:
dc:79:54:2e:3f:40:18:57:d7:67:8c:d9:c8:25:e8:
b9:ab:cc:cb:4f:45:af:5a:5d:d1:76:b0:a2:0f:c0:
00:45:39:f8:e1:50:ed:f2:c2:4f:9a:ae:c1:08:57:
d6:84:5f:7a:0f:7c:ad:51:bb:e7:54:30:06:b7:74:
b1:77:d9:91:1a:8a:da:45:9e:fa:52:b7:58:5f:12:
b4:85:2c:63:5d:7f:85:4a:d4:1a:12:8d:55:cd:1e:
61:34:9c:2b:d9:bf:e4:e8:36:0f:00:02:f3:1e:fb:
ec:ae:e6:27:88:06:e5:d8:06:02:be:8d:7f:9e:83:
55:54:5f:8e:36:a4:eb:69:95:44:4a:3c:b2:42:63:
f2:60:fc:55:63:8d:9a:c1:e5:f5:88:4a:d1:3a:59:
83:3c:db:9f:f8:b7:a0:c3:02:c1:b8:76:a6:77:66:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.4.0/22
193.108.193.0/24
IPv6:
2a03:16e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21235
Signature Algorithm: sha256WithRSAEncryption
25:a9:b6:b3:6b:3b:36:b1:69:07:1d:f8:f2:da:99:a0:c2:c3:
7a:21:9b:f2:4f:4e:88:a2:f7:23:0b:64:62:74:20:31:0f:cc:
c0:f9:23:d9:90:a9:7e:8c:4f:d8:35:99:44:27:8b:62:40:46:
9a:bf:cf:11:62:e7:dc:fa:98:0c:3a:59:d5:a9:09:ab:f1:12:
dd:18:9a:50:4f:a8:c4:c0:1a:25:f2:95:ed:7c:64:da:65:47:
83:60:e3:5c:69:fb:7e:20:2d:8f:da:6a:b1:a7:8e:33:41:a7:
28:9c:34:e9:a5:88:ee:14:49:2f:a4:b6:a7:c3:b0:a7:8e:f1:
98:d1:f6:3a:85:fd:00:78:32:5a:36:8f:fc:41:2d:6b:5f:8c:
e1:35:82:aa:a2:d3:5f:37:0d:68:dd:61:bb:75:8b:ea:bb:b8:
fe:f2:3f:8d:87:aa:dd:c1:ad:81:31:e4:56:2d:b7:e5:92:34:
5f:90:a2:a8:c2:9f:60:49:bb:19:26:f2:e1:4a:fd:46:e0:5c:
51:88:a7:b1:68:44:d4:75:8e:9e:66:7d:9f:41:48:7a:55:2c:
c3:34:b0:f3:b7:29:c2:13:b0:8d:3c:c1:a0:f4:75:96:14:bd:
ac:9f:0b:00:be:58:17:54:cd:9f:c2:76:fc:9a:2a:25:72:86:
13:22:18:90
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzF3POrNIZohHtHFF2CVGagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDY4NmU5OGFjZjJhMzdiZjJhZWM2OTgwN2U2OTY0MDYwOTc5Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm17hrbaeMD2FO7599fZkwJnaovC
bAqCxQ1HUAxcrjvKAw7ytKDZ0+9CK7ZXmJH5LtprTxfrOFiTEFRXpu6o83Z8nqCL
2POQmfutp7ZtMxhxoQpxXIOE3HDceVQuP0AYV9dnjNnIJei5q8zLT0WvWl3RdrCi
D8AARTn44VDt8sJPmq7BCFfWhF96D3ytUbvnVDAGt3Sxd9mRGoraRZ76UrdYXxK0
hSxjXX+FStQaEo1VzR5hNJwr2b/k6DYPAALzHvvsruYniAbl2AYCvo1/noNVVF+O
NqTraZVESjyyQmPyYPxVY42aweX1iErROlmDPNuf+LegwwLBuHamd2ZU7wIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFB1obpis8qN78q7GmAfmlkBgl5y4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2E4Nzdj
OC1lN2NiLTQ1NDAtYmQ0My01YWNkYmY0NzQ1NDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvYTg3N2M4
LWU3Y2ItNDU0MC1iZDQzLTVhY2RiZjQ3NDU0OC8xL0hXaHVtS3p5bzN2eXJzYVlC
LWFXUUdDWG5MZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuUEEAwQAwWzBMA0EAgACMAcDBQAqAxbgMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAlLzMA0GCSqGSIb3DQEBCwUAA4IBAQAlqbaz
azs2sWkHHfjy2pmgwsN6IZvyT06IovcjC2RidCAxD8zA+SPZkKl+jE/YNZlEJ4ti
QEaav88RYufc+pgMOlnVqQmr8RLdGJpQT6jEwBol8pXtfGTaZUeDYONcaft+IC2P
2mqxp44zQaconDTppYjuFEkvpLanw7CnjvGY0fY6hf0AeDJaNo/8QS1rX4zhNYKq
otNfNw1o3WG7dYvqu7j+8j+Nh6rdwa2BMeRWLbflkjRfkKKowp9gSbsZJvLhSv1G
4FxRiKexaETUdY6eZn2fQUh6VSzDNLDztynCE7CNPMGg9HWWFL2snwsAvlgXVM2f
wnb8miolcoYTIhiQ
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:49:32 2024 by rpki-client on console-ams.rpki-client.org