Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer (raw, json)
Hash identifier: qKs2d/bKE4l/HLyOsYgwEbvjfuEjn6D724lTb5Vrd0Y=
Subject key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DD50BC3B73803C18CD9F5E8E32A86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209803
IP: 193.32.156.0/22
IP: 2a09:880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d5:0b:c3:b7:38:03:c1:8c:d9:f5:e8:e3:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:9a:98:10:28:79:21:2f:47:92:d4:b4:b3:
01:15:88:6e:24:33:e9:b6:88:a5:f9:9d:ea:1c:84:
ef:d5:93:c4:71:90:da:eb:0a:18:72:7e:79:2f:57:
8a:f6:2e:30:26:7e:96:ff:f8:64:ce:ba:db:b6:63:
44:54:f9:30:d0:b3:71:c6:45:e4:12:da:60:5b:b9:
47:7e:f5:49:c0:3c:af:4c:3a:8a:11:30:ae:2d:d6:
a6:f4:77:8f:1c:12:4e:ef:76:80:cf:da:b5:0c:e3:
cc:cb:c3:f1:40:27:26:dd:98:80:8c:cf:6e:2d:b5:
f3:c5:ae:5e:4d:49:34:56:47:c1:99:38:a5:d6:a8:
1e:11:cd:78:78:bd:62:58:52:d8:ca:71:43:18:f0:
de:dd:c2:4a:d6:47:86:70:be:45:a2:02:c4:93:71:
03:29:1c:bf:e5:84:78:cb:f5:ea:49:8d:69:11:2c:
ad:4a:a7:94:a8:54:fe:4b:7d:53:a4:3a:0f:7a:e5:
01:63:80:88:e9:72:64:08:a8:19:40:ea:a1:53:a9:
95:5c:2d:d8:04:79:4c:fb:2d:6d:e5:c2:51:18:14:
ae:e1:9b:a9:38:3b:1b:bf:49:81:09:48:fe:7d:5d:
5b:83:68:24:f5:48:36:38:10:70:be:c0:47:81:06:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.156.0/22
IPv6:
2a09:880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209803
Signature Algorithm: sha256WithRSAEncryption
74:d6:03:93:85:05:7b:42:0c:a8:e4:bf:d8:2d:ab:45:1c:13:
ce:1d:d3:8e:ab:5c:38:3c:e3:c9:14:60:c8:b2:9d:5f:fa:4f:
8a:ef:92:47:27:ef:02:f4:00:95:27:e5:98:4e:bc:6a:6d:88:
7e:47:dd:9e:f6:c0:7a:07:58:f9:ca:6b:81:b0:0d:c9:88:a5:
aa:84:23:f7:84:98:89:ea:03:48:46:61:12:b3:2c:f6:5c:03:
96:45:ab:60:10:62:43:98:20:1e:90:d6:d0:6e:5d:80:b6:98:
ba:8d:72:a1:81:a5:b9:13:e5:6d:a3:f3:7c:9a:84:78:8c:f7:
2e:f8:ee:66:6f:4d:53:0f:7c:97:a2:8b:92:cd:06:8c:ea:61:
71:bc:44:d8:ba:e2:ee:be:dc:1f:c2:c8:09:59:bc:fd:b5:ea:
96:fc:b8:43:77:57:6b:f6:8d:1c:9e:dc:a0:0c:f5:e7:0c:73:
87:0c:68:f0:9f:61:e9:2c:fe:5d:86:d9:cd:86:92:59:b5:89:
ec:34:1d:78:84:3e:71:85:30:e2:2d:b8:a2:6a:f0:b0:8c:36:
00:5b:19:14:00:66:49:d5:b9:46:cb:0d:35:7b:56:99:3a:e0:
d4:79:2d:44:d3:c1:ce:16:36:3d:81:ef:83:82:60:55:39:2a:
c0:30:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:12:38 2024 by rpki-client on console-fra.rpki-client.org