Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
File: HkQmt06M9v_e23sGBBgIMqhiXzI.cer (raw, json)
Hash identifier: GOviCH6fBMI6noZ9fqYVgj1HoXV7XTVfdxNsHLAWA9Y=
Subject key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349145D700379AD301A2FF0DAC57C28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216330
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:14:5d:70:03:79:ad:30:1a:2f:f0:da:c5:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:48:db:3e:6e:be:d1:37:79:e1:7c:d1:02:
26:c6:73:0f:d4:d5:64:93:fa:0c:43:03:52:58:14:
7a:8c:54:5c:f4:d8:0c:00:6e:02:43:5b:ed:d6:b6:
4b:f0:46:66:39:fa:6e:2f:95:d7:3a:8d:dc:b7:89:
ea:d1:f5:a7:a4:17:24:dc:c1:97:3f:62:98:86:eb:
94:4e:fa:7d:bf:26:46:09:f2:7a:57:be:54:b8:e1:
81:db:03:c0:da:9e:f3:e9:77:93:46:b7:5d:d1:68:
ba:29:36:ee:28:6e:43:4a:92:b2:85:ab:8a:4c:50:
d7:79:92:13:14:f8:73:35:f7:43:f5:2b:87:44:c1:
a2:d6:d6:53:b6:36:1d:4f:4c:6f:63:fa:5b:0f:1d:
43:1c:b5:fd:68:72:de:d7:2e:dc:da:3d:d4:d5:cc:
45:bd:ff:cb:87:09:33:bc:e6:8b:84:56:0f:c8:12:
df:76:01:f4:48:d9:4a:7d:81:a1:31:75:4e:84:1c:
6e:a2:ba:75:12:72:07:67:63:cc:9a:5e:6c:2f:34:
3e:c4:78:23:2f:5a:31:37:0a:87:88:19:15:2a:12:
cd:cf:01:47:fe:d3:eb:97:94:bd:78:e7:52:be:a7:
b1:c7:c9:7f:d7:4c:cc:7c:16:5f:ed:8a:30:ac:92:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216330
Signature Algorithm: sha256WithRSAEncryption
59:71:c1:08:31:28:89:a0:8a:cb:3a:6f:56:4e:52:97:ca:2b:
1b:32:c7:77:42:ca:61:9d:87:2f:e8:20:85:b1:5b:17:20:40:
93:5f:42:b2:e6:dd:c0:d3:e9:f0:cf:6a:15:12:bd:4e:18:6c:
ac:5b:95:ef:33:82:49:f1:c5:d1:3f:f7:c8:74:89:2f:1c:59:
7e:ec:23:bd:b1:3a:b3:68:e4:23:58:f2:43:1c:36:df:fd:36:
34:92:bd:9a:56:6f:ea:e1:16:32:a8:93:36:b8:10:21:b3:38:
8e:98:bd:f7:1d:72:fb:95:1e:5c:8a:43:85:0f:bd:fa:a1:92:
a6:c9:1a:70:d9:79:fd:ff:4f:a9:ed:37:a5:75:c2:e4:b9:cc:
b7:39:7a:97:eb:6b:53:11:75:18:9a:e3:32:81:af:41:1a:24:
7c:22:1b:12:29:ae:26:cc:a0:2f:7f:1b:98:9b:d2:63:8b:5d:
9e:45:22:a9:3f:be:c1:5a:99:1f:1b:7c:f9:0e:8b:45:58:d7:
bc:e1:44:50:0c:90:6e:14:8a:8e:c8:80:37:9c:5f:a6:3e:d1:
d8:32:82:74:cb:db:a8:41:b0:95:ee:0d:b1:9e:e7:c4:99:92:
92:25:a5:06:e5:1c:ad:5c:28:e9:27:94:f9:1b:dd:a0:20:81:
2c:a9:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:39:17 2024 by rpki-client on console-ams.rpki-client.org