Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
File: HYKLeBsHn7Q92wynXcAm511_JeQ.cer (raw, json)
Hash identifier: FJWCBSZ+YKpynzpPyawGBWKw7opmvbDSmsYE/8ffdOE=
Subject key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802F41F5E57FAB0D84E7FA7149F60FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31370
IP: 89.249.240.0/20
IP: 109.72.224.0/20
IP: 185.215.60.0/22
IP: 193.27.41.0/24
IP: 193.39.160.0/22
IP: 2a01:94c0::/32
IP: 2a0c:dc40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f4:1f:5e:57:fa:b0:d8:4e:7f:a7:14:9f:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:e8:fe:47:61:74:8f:b4:86:4b:51:8c:32:
c8:d8:ee:4d:5b:39:ea:9e:98:a6:49:e0:6f:bd:47:
0b:34:17:c4:6a:1d:69:41:03:3e:1e:53:7d:bc:f4:
8c:c9:49:1e:97:f8:91:29:5b:1b:8b:c6:e1:26:82:
88:57:1e:b3:ca:d3:59:c8:76:00:d3:21:6f:12:f1:
53:53:cd:10:f2:26:e4:8c:ad:c9:26:34:a4:56:e4:
4e:d3:b2:8b:ec:b6:8c:f0:3d:aa:73:25:a5:84:bb:
2d:56:d8:9e:99:0c:b3:ea:79:bd:9c:ad:8f:0b:0c:
50:fd:63:8b:eb:5e:c3:e2:a7:59:1e:f1:cb:56:72:
59:9b:95:f6:ec:cf:fc:98:90:ad:4b:c4:dd:fd:a4:
b2:0c:b3:c7:8d:29:8e:76:e8:c5:41:f3:ee:e0:9d:
27:26:2b:52:28:34:ab:97:6b:39:89:bb:cc:a0:ce:
ed:21:3b:c7:7b:b6:3c:28:56:43:29:62:14:51:68:
59:2f:a2:41:b1:2c:1d:71:cf:92:f1:df:93:60:f4:
5e:a8:27:05:9c:d5:54:5c:42:57:7f:d2:18:1d:10:
f6:bc:85:90:ba:a8:7c:af:bc:a9:fe:23:79:34:98:
87:a7:0b:d3:5c:bb:f8:62:90:63:9b:a1:c6:65:5f:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.240.0/20
109.72.224.0/20
185.215.60.0/22
193.27.41.0/24
193.39.160.0/22
IPv6:
2a01:94c0::/32
2a0c:dc40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31370
Signature Algorithm: sha256WithRSAEncryption
09:f1:2c:7b:f7:3a:3f:3a:33:b2:3d:71:21:b9:c6:a3:d9:9a:
b3:6d:98:26:ac:99:1c:20:5e:58:69:fd:4c:e7:f0:c6:04:79:
56:80:39:7c:fa:48:83:12:fe:d8:e9:83:13:60:d9:85:4a:1b:
78:41:47:39:df:2c:82:8c:48:84:3a:bd:4a:c4:87:19:ea:05:
b7:3a:bb:89:d6:a0:89:8d:26:4b:6c:60:b8:5e:49:a9:5f:8e:
1a:a9:e0:e1:ca:66:19:c1:61:90:8a:8d:36:0d:93:4f:8d:9b:
9e:4d:3d:32:01:27:1e:42:5c:3d:52:6b:8a:2b:f9:d0:66:eb:
86:97:13:59:6a:20:10:95:ad:af:40:f8:ec:16:72:f3:f7:ad:
5c:34:da:61:a5:26:fe:11:01:25:4c:df:f2:33:14:92:ba:6e:
f3:8e:3e:09:c3:7f:6f:20:74:ef:79:0b:a1:22:a9:ca:ea:2d:
21:72:59:6d:56:f3:29:b8:3d:3b:11:da:db:22:5f:d4:e9:31:
21:4b:2c:b6:5d:fa:43:44:cb:0f:8e:54:71:66:8d:66:83:50:
3c:37:2f:42:80:87:eb:60:de:cc:89:fc:61:c6:53:45:1f:35:
4f:9c:f1:e1:9d:a3:df:1b:a4:58:08:db:e4:06:61:c8:85:d6:
0f:5d:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:22:37 2024 by rpki-client on console-fra.rpki-client.org