Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
File: HbvT4bzmclG1jybP0l_UAVZBZgM.cer (raw, json)
Hash identifier: brzR0+b4mZXydlFZonsoLrd22ahfK8gXdi5g1mtve6s=
Subject key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726C1BC31E00D0B03027F8BC74228CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41215
AS: 42028
AS: 42684
IP: 77.73.192.0/21
IP: 185.100.152.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c1:bc:31:e0:0d:0b:03:02:7f:8b:c7:42:28:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:8f:bc:af:c0:15:8c:03:5f:b8:b9:9f:24:
78:e3:20:98:13:09:39:0a:c9:53:64:fe:ee:fe:02:
c8:7c:12:08:32:d9:f3:23:16:03:e0:ec:61:ea:dd:
27:c8:f9:92:d6:39:35:61:24:bc:37:9e:44:6a:a5:
ae:71:47:6b:25:4f:68:65:22:f9:00:48:de:d7:38:
3a:9e:ea:40:90:05:da:8b:5f:f6:65:86:f7:ba:8e:
74:d3:24:17:35:cf:25:39:a9:ca:b4:f7:89:a2:c7:
e8:1e:34:b1:ec:10:59:13:69:28:a1:58:b4:1e:fb:
41:ae:c6:34:be:fc:a2:c9:08:87:aa:7c:a3:aa:c5:
dd:f7:65:21:bd:c4:a3:d0:d2:67:0a:76:9f:a5:b1:
d1:fe:f9:a9:4d:62:c1:93:29:4e:59:da:3c:fa:dc:
9d:e6:0f:08:19:af:9e:8f:f1:af:f0:d7:7c:49:a0:
99:c5:3c:9c:dd:59:e1:d7:11:83:41:5b:7b:b0:3c:
da:d0:b8:fb:d1:b6:82:55:92:c0:30:2c:b7:5a:a3:
bd:6a:d7:a4:a6:1a:2b:a5:e6:8d:e7:a1:ef:34:dc:
25:ab:f6:21:f9:0a:bf:33:33:eb:0d:73:8e:7c:53:
d7:62:03:ec:03:3e:d2:2d:38:b3:fb:ed:39:30:b8:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.192.0/21
185.100.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41215
42028
42684
Signature Algorithm: sha256WithRSAEncryption
2d:7f:0d:5c:c4:a2:d2:27:ac:2d:e9:b7:02:30:50:30:e2:c9:
39:b1:be:1e:9c:24:92:ea:17:6b:c3:e9:17:6e:b2:2c:f6:6c:
23:39:9b:29:a1:87:4b:a3:8d:99:73:51:ce:6c:3c:3a:55:91:
d9:5b:bf:4d:9f:41:ff:ee:85:49:74:e7:da:79:73:9f:5f:9c:
b3:de:e5:7d:42:b3:4c:0f:df:87:64:97:fa:3b:76:b2:7f:d6:
88:54:e9:08:e6:5e:39:ee:ae:35:eb:a9:75:57:35:39:49:ef:
30:e5:a2:73:26:0f:13:b2:26:01:1e:a4:22:95:bc:6e:eb:1f:
6c:79:e0:bf:2e:85:62:57:ed:f7:71:a5:13:e5:4e:44:8f:bb:
0b:73:cb:11:3e:13:af:c7:27:2b:f2:86:24:7c:98:a3:a6:87:
b0:aa:7d:7e:03:75:ea:06:a6:01:47:ce:fb:10:64:73:53:b5:
83:28:86:c1:46:49:b9:f9:c9:84:ff:e3:a6:7a:b2:25:f8:c5:
42:cb:6b:a6:a3:b6:e8:c7:60:72:04:ca:64:45:c8:42:5f:63:
15:c3:3a:02:43:89:dd:9f:99:ea:30:8f:6e:c3:01:b6:49:b9:
90:1e:82:55:08:df:07:41:8e:3a:89:11:23:d6:b3:7a:6c:7c:
66:26:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:06:50 2024 by rpki-client on console-ams.rpki-client.org