Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
File: HWtralBhpBFdUwQM_9xks7DXGng.cer (raw, json)
Hash identifier: Gf0HprX/4DDOZ+49uxCKOjQZg0hq8Rfzu6hnfG+lfOA=
Subject key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79347A306210F2594B26E344285A955
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200706
IP: 185.88.16.0/22
IP: 2a05:c800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:47:a3:06:21:0f:25:94:b2:6e:34:42:85:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:3c:64:49:ee:58:d5:5c:ba:02:d4:c0:02:
47:9a:81:92:25:65:15:9b:1e:08:a3:af:59:39:6a:
6e:b5:24:c6:eb:88:9c:6f:54:1b:e1:66:8a:c3:55:
f1:4e:87:08:9a:13:f7:1f:fd:d7:1c:4c:4a:3a:66:
95:e2:a2:7c:ec:d7:85:c8:29:ef:d4:54:1e:f8:5c:
a5:c4:51:56:58:8a:73:8b:b2:78:51:b5:4b:d6:f9:
74:87:af:d3:d0:ce:26:d7:c3:7c:9c:6f:01:d5:b0:
37:7d:86:f5:30:c6:8d:60:cc:0d:c0:47:c3:a1:2c:
60:6a:e2:ab:9c:3f:6f:26:82:68:7f:f8:55:29:00:
9b:6a:2f:99:70:88:9c:c9:d3:9a:41:08:80:18:96:
70:9a:f4:38:34:e1:4c:16:6c:b6:e8:b0:fd:dd:c7:
de:11:95:9d:37:16:91:ad:21:10:ec:32:d8:4b:5c:
af:76:49:60:df:e0:80:32:56:ab:26:e9:39:c2:f7:
8e:46:2b:10:df:58:8b:12:f4:ad:86:aa:0e:68:7c:
94:9d:dc:79:89:0b:4e:56:aa:bc:cd:9c:7a:4f:fa:
50:fb:2c:ff:4f:6e:fa:91:6b:d0:db:dc:47:1f:3f:
91:db:fe:0e:4a:f0:d6:d7:a4:d2:2c:77:6a:ed:82:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.16.0/22
IPv6:
2a05:c800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200706
Signature Algorithm: sha256WithRSAEncryption
48:f0:4f:06:8a:a1:b4:9d:81:9f:0e:9b:c6:30:d7:0a:15:d4:
2e:bc:0f:9f:a0:99:e6:ea:95:b6:b0:03:73:76:ac:c6:97:fe:
74:4b:84:71:e6:68:ee:4e:c0:d6:96:bf:9e:8d:8a:5f:18:9f:
58:c7:44:34:c2:ed:75:e8:01:21:65:a3:b3:dd:66:69:cd:97:
26:4d:de:88:0a:c7:5c:b6:36:4a:72:eb:26:03:28:b1:11:0d:
da:0f:0f:00:59:fa:e5:c9:48:e1:f2:54:2f:78:52:4f:5b:42:
fa:75:c5:6f:8e:09:9f:6f:e2:b9:78:d7:1f:eb:70:30:d6:95:
a3:1c:b9:7d:f9:04:73:d1:cf:6a:de:b8:11:97:1e:4f:4a:f1:
a8:ba:e8:d6:cc:6a:2f:2d:6d:28:f7:e4:84:e7:bb:25:9b:f9:
d5:c5:82:fe:36:98:e9:bf:5c:48:88:3a:47:69:a5:b5:97:d9:
27:65:cd:0a:cf:16:64:d8:64:e1:c4:a5:b7:4d:69:84:8c:7d:
c8:76:b5:df:eb:d4:6e:4f:70:0b:59:83:21:a9:c7:f8:82:56:
3f:25:31:8a:57:8d:b8:fd:f0:21:86:96:ff:b3:9c:01:7c:6a:
52:1f:e7:48:0b:ac:79:ff:e2:fb:c1:61:f0:30:83:1a:40:cd:
41:fa:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:38:48 2024 by rpki-client on console-ams.rpki-client.org