Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.cer (raw, json)
Hash identifier: YDtAeFqeBnV8vQ+efKReUUKQeEFzrK2Qr0DfkvdF4Z0=
Subject key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A7FB8D3AF9E6F5E5B5C2E472553D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209956
IP: 217.119.134.0/24
IP: 2a12:75c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:fb:8d:3a:f9:e6:f5:e5:b5:c2:e4:72:55:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:6f:d6:e9:08:6d:c9:9e:54:f5:ac:91:4d:
93:c6:f8:c5:a3:91:52:cc:9b:d0:e9:7d:f6:25:fd:
96:76:2f:cc:80:8a:34:ac:b8:1a:e1:ab:3c:a8:70:
b8:a5:5e:21:08:af:6a:14:71:62:ab:39:21:6b:d8:
7a:72:e5:9e:df:cf:e8:a2:5e:6d:b9:10:78:05:d5:
fd:89:53:54:81:50:c7:3b:fc:23:b8:fa:26:0e:5d:
c7:f5:75:2c:6a:aa:16:b8:31:f8:54:e7:d7:04:e8:
4d:03:25:03:57:99:e7:3f:b2:93:b8:f7:54:8d:97:
aa:90:67:9a:f3:d2:a3:f7:de:95:5c:60:73:4d:a3:
3a:e3:b9:fa:03:41:58:a4:df:97:3a:bf:dd:4f:c4:
a6:9a:45:6a:6c:74:9a:40:49:0b:1a:79:36:71:7e:
60:ff:0b:99:1c:5a:a2:91:13:a7:50:1f:07:da:79:
95:7d:84:24:9c:db:96:c7:04:93:1c:ab:7b:51:8f:
62:f2:1e:b2:0c:09:58:65:50:2d:0d:d1:1a:c8:78:
46:af:fb:91:83:d1:1d:b8:c1:c6:6e:c7:e8:5f:ed:
31:2d:d6:cd:95:e2:ef:87:6c:da:34:f4:3f:cf:1f:
6d:6d:a7:23:52:86:a7:5f:0c:76:6a:d0:70:86:43:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.134.0/24
IPv6:
2a12:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209956
Signature Algorithm: sha256WithRSAEncryption
20:ff:a2:2b:e7:fd:ac:ea:ee:79:86:21:bb:87:9e:46:9e:83:
29:7d:e3:30:95:20:80:a1:e1:99:20:6a:a3:8f:45:8c:27:47:
39:45:30:61:a4:b1:6e:e7:c4:8a:1d:2a:3b:02:83:65:a7:9b:
6d:12:40:1c:4f:ce:22:fb:94:a0:44:66:ce:49:d0:39:a9:53:
c3:c1:b6:10:00:f1:be:4f:d2:50:57:e7:f0:f0:e0:05:ef:0a:
a1:5d:c0:bd:e3:ef:23:8d:e2:b8:9a:8c:a1:e6:c9:1e:d3:18:
3b:87:fc:ab:c8:61:da:02:c6:b6:10:3d:ca:5e:9d:11:8e:ce:
14:a5:05:62:d8:8d:53:d3:fb:74:e3:11:0f:4a:c3:e2:f3:53:
0c:0d:5e:15:17:22:15:3e:ba:97:ed:93:56:cb:3e:b2:93:3a:
18:0a:c8:4e:51:81:69:b0:02:ec:38:e3:bc:eb:15:12:55:f0:
3b:ad:7c:48:6c:80:05:bd:5f:23:4d:46:6b:94:5b:e0:ef:b5:
32:9e:3b:47:4c:86:1c:f3:d1:7a:d3:bc:0a:9f:82:d8:80:55:
5c:1d:c4:64:62:64:e2:04:c1:0a:e4:f3:a2:10:05:ab:94:08:
90:c4:71:1b:ee:12:5b:a0:83:9e:c3:33:c4:39:45:ed:45:ab:
4a:22:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:20 2024 by rpki-client on console-fra.rpki-client.org