Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer (raw, json)
Hash identifier: 6f5XuTYd+320/wVTltQLc5Z1pTlqq2IcqadGO7xEImk=
Subject key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B818D95CA77E75E7D153018526954
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.164.154.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:81:8d:95:ca:77:e7:5e:7d:15:30:18:52:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:90:10:92:1e:11:99:48:dc:7d:75:94:a8:
fd:dc:0a:b2:ec:9d:3e:01:df:73:cc:c8:2a:54:02:
04:bf:9c:b5:4d:e8:ad:fb:94:62:1b:5e:c9:77:90:
be:58:7a:b4:17:6c:69:07:7d:2b:22:f3:cb:c0:09:
bb:b1:42:56:90:a0:8f:f3:f8:9d:71:27:2b:de:e6:
18:4e:6f:70:e2:a2:76:47:74:a1:69:41:1b:61:39:
0a:16:c3:4f:23:f3:1d:61:87:f0:1b:a8:77:60:0c:
4f:c2:e2:f0:a5:0c:74:46:11:a8:67:e6:8a:7f:81:
bd:c6:11:8b:f8:53:c0:03:3d:ab:ab:21:22:80:89:
5c:9f:6d:74:13:48:d6:83:25:a4:56:fb:b0:99:d0:
34:c1:b3:db:fc:f6:4c:9e:68:24:8d:11:f6:28:02:
b5:c9:b6:b2:77:78:7c:66:1a:af:c8:0f:70:23:e9:
3b:5e:a3:6a:7e:e0:59:28:a1:33:0f:56:1c:a3:f2:
0e:a1:76:ce:1e:1a:f6:40:1b:2e:49:ca:ac:1d:a8:
90:91:2d:36:ca:1f:a8:38:dd:21:c6:da:5e:ff:2b:
50:a3:13:85:b5:85:47:d7:1e:d0:0c:46:55:14:ff:
38:f2:0f:f1:b2:93:16:97:1b:79:a2:62:34:d7:00:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e9:99:c7:07:92:33:f0:91:d2:bb:df:27:61:82:3c:82:e3:
01:32:c7:9b:a6:e8:1f:4f:3e:9b:36:52:b7:95:52:07:61:ff:
73:e4:34:6a:98:27:32:6d:5d:e4:3b:29:76:49:8f:38:27:2f:
61:10:8d:5a:b1:76:86:35:54:b3:36:7a:3b:44:08:4b:81:c1:
7c:af:bb:46:53:6a:80:a9:e6:d9:5d:2a:6b:f5:fa:45:15:4a:
be:5d:f6:5b:81:82:c2:37:30:a5:e7:a7:1f:b4:da:34:a3:85:
e6:f5:6f:f3:bb:00:68:4d:b4:8b:65:ec:12:3b:6e:03:20:03:
9b:e2:0d:16:e0:f9:4b:fa:8a:a1:04:a3:f5:1e:3e:d5:82:84:
0f:de:f7:3b:19:8c:b5:d6:c7:f4:1e:fa:f9:1a:35:cc:ba:cf:
10:15:c1:00:67:3b:33:f5:13:a9:89:6b:70:85:72:d8:46:18:
d4:17:a1:9f:16:2a:63:b1:6b:a5:41:85:fd:dc:4f:aa:d8:c9:
55:41:4b:69:09:0f:fc:5b:a7:e2:37:61:95:8b:69:82:c1:fe:
99:00:67:b8:bd:7a:b4:50:60:96:be:dd:f7:8b:de:f1:fe:3f:
b3:e7:8a:0e:f4:90:26:62:0d:9d:d9:9a:02:9b:a4:c0:b1:a7:
21:39:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:28:02 2024 by rpki-client on console-ams.rpki-client.org