Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer (raw, json)
Hash identifier: LliK0MC7SBW9eWp8hFTUMnSpJgPjfYxcx0ZKro6j51k=
Subject key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34930256FF330289BCF7EED0D6F037E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.254.224.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:30:25:6f:f3:30:28:9b:cf:7e:ed:0d:6f:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:f4:4e:10:19:7a:3f:39:7d:d4:de:62:35:
85:8d:74:c2:bd:4e:28:f6:8c:14:d1:a3:42:9b:19:
32:06:f2:51:a7:dc:47:4c:38:c7:2d:60:65:97:98:
84:d1:fe:11:eb:97:52:5d:c4:5e:32:d7:c1:4b:42:
68:a9:e6:af:d2:66:ff:d6:df:85:af:32:b1:c2:f5:
be:43:60:04:25:19:da:18:5c:c8:67:27:b6:c5:ba:
81:44:a9:0a:45:e1:51:93:0e:31:6d:68:09:6e:bd:
e8:e7:93:3b:73:e0:a3:95:2f:81:13:7b:14:3a:41:
19:18:88:da:ee:79:12:b7:14:7d:38:4b:99:8e:b5:
b3:3f:fa:1f:7d:bd:38:9f:7b:a8:77:61:da:58:44:
0f:ab:61:02:53:1c:24:7d:3d:b2:d8:fb:e1:32:fa:
05:88:88:e9:87:cc:3c:53:13:86:3d:13:b6:ca:cc:
4b:60:65:49:eb:53:4d:85:a9:f1:e5:c6:82:1b:6a:
51:98:05:51:5f:ef:fa:19:0f:8c:fe:cd:c8:d5:76:
5e:c9:bf:77:ad:71:c5:26:00:13:1f:78:4c:a1:0f:
4b:33:f4:e0:f3:33:06:49:e5:17:24:ed:2c:eb:3b:
ca:86:67:ae:e4:bc:7c:be:46:4f:73:0f:cb:e5:28:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.224.0/22
Signature Algorithm: sha256WithRSAEncryption
91:23:7a:26:04:d2:62:98:2e:09:09:6e:33:2c:62:35:83:90:
17:5e:2b:a4:6b:3f:47:fc:86:dc:1d:4a:91:29:5e:81:6d:3b:
a7:e4:57:b0:19:97:2d:20:83:19:22:fb:d8:1c:65:e7:7a:9c:
19:78:97:8e:6e:9d:d6:76:82:d5:46:b8:fc:6a:66:66:ba:29:
6a:87:ca:69:15:e9:07:20:fa:bd:91:8d:44:ac:a2:b4:ba:c6:
20:33:05:d3:fb:c1:52:ed:73:9a:c6:a1:71:08:69:cc:64:1e:
b8:29:4c:dd:2b:6d:80:ec:00:b9:eb:66:e8:61:b1:1c:17:b5:
6a:b1:9e:59:0c:6b:18:14:7f:47:5a:28:72:d6:0c:c2:58:d2:
d5:d9:05:c6:ca:fa:cb:42:56:62:6e:43:f8:27:de:79:fd:10:
37:fa:f9:4c:01:b0:5c:b1:55:34:b6:ac:b2:70:b3:4f:cf:0d:
dd:c9:f9:16:6b:d0:b3:23:35:42:a5:93:95:58:cf:42:f9:0c:
e8:b9:58:eb:93:e4:b3:b1:55:82:f4:71:46:92:99:8f:22:f3:
57:50:e6:0b:7f:d7:40:02:ea:e0:19:3f:6b:9e:4f:5c:f8:5e:
c8:36:3f:77:7b:05:d3:9f:29:f7:e2:0c:11:6b:e4:58:c5:8a:
ef:63:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:50 2024 by rpki-client on console-ams.rpki-client.org