Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer (raw, json)
Hash identifier: o4XOawvn2Bak4MwsLOVYAQIa9Vk3jwc5Lk4dS/JKnqQ=
Subject key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D47F1E21562D951147792123F165C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.236.136.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:f1:e2:15:62:d9:51:14:77:92:12:3f:16:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:6e:b9:04:f5:61:95:10:48:0e:69:e1:51:
db:35:49:ee:ff:81:c3:45:c8:bd:28:ab:41:7b:69:
99:ff:4b:ab:ad:d2:e6:c6:85:ef:2f:71:37:4c:48:
92:b0:6f:82:c7:06:8e:2f:a3:9e:80:b2:49:14:3d:
0e:05:44:b6:c1:97:d8:9c:0f:db:05:6e:b6:0b:91:
90:6d:e8:9c:88:e7:a4:eb:9a:7e:a5:dd:76:53:26:
19:eb:2e:88:db:d3:de:9e:e3:86:16:f4:d0:ad:66:
50:fa:26:45:bd:e9:df:75:f2:fb:69:e6:70:63:6e:
8e:25:b2:5f:76:8f:1b:b8:01:84:3c:a1:21:19:14:
cd:66:d1:11:47:68:8c:be:ec:55:08:3e:96:73:b9:
81:30:bd:49:eb:e2:86:45:92:5a:8e:d2:7a:41:b6:
27:9b:5d:29:bb:9e:ee:54:6b:44:67:e9:34:e8:04:
66:1a:85:dc:ab:3d:06:99:96:aa:57:8e:6c:ce:b3:
74:6a:29:5f:1a:77:85:5d:3a:1f:e4:8b:fb:68:f4:
30:e5:cd:09:a2:fc:19:16:dd:7b:71:22:b4:8f:84:
52:5c:aa:39:08:ae:20:b1:08:34:eb:db:f2:f2:b9:
5b:88:16:b0:d5:47:5a:22:fe:6e:20:80:d3:92:46:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.136.0/21
Signature Algorithm: sha256WithRSAEncryption
25:ff:86:01:39:a9:7c:ea:65:a0:46:ed:8a:a4:05:f4:d2:0e:
cb:3c:2d:31:28:9e:7e:59:8e:0d:71:51:84:bf:10:6c:5e:3e:
16:f1:10:80:37:3b:e0:12:ab:f5:40:7d:a7:69:8c:75:a1:5e:
58:e1:ea:81:f3:4a:05:9c:1e:50:2a:05:3e:c4:06:1a:cd:0d:
43:6f:4d:76:a0:d9:3f:b6:52:31:25:6e:46:97:3a:71:fb:60:
88:30:24:8d:77:93:7c:a6:77:c1:af:df:f9:2e:70:a7:12:94:
19:ef:0c:c4:e6:f8:51:b6:33:a6:e0:58:f3:ae:3d:3e:a1:4c:
6f:a5:ae:bd:20:33:cd:c4:31:c3:42:e2:e0:82:7b:c5:2c:01:
c2:7e:65:fb:23:09:20:ff:52:b4:7f:95:a7:14:5a:46:4c:d1:
89:1f:cb:ad:b3:aa:7c:4a:f6:6b:05:0d:f8:3b:4e:ad:d0:ba:
08:17:0f:4b:79:27:65:03:02:5b:f0:3c:8c:51:0b:80:1e:fe:
01:b3:71:74:af:13:3e:88:61:d3:7a:cf:7a:9c:a0:24:5f:64:
f4:cb:28:b0:82:fe:9e:2f:77:db:04:d5:38:cc:f8:b1:23:55:
4b:3c:f8:bf:3c:3f:9c:3f:95:e3:d7:a3:b6:a4:3c:96:3c:3c:
d1:48:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:22:41 2024 by rpki-client on console-fra.rpki-client.org