Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
File: HpICrmewRlNH1t35D2Ri-ubk5kM.cer (raw, json)
Hash identifier: I+Wlb55gzP1RZruKP4ND2uu77WuUbXC+OmXPdGcrPw8=
Subject key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF4F7B1E519DFC82004AB7974C4A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201444
AS: 203333
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f4:f7:b1:e5:19:df:c8:20:04:ab:79:74:c4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:e3:1f:6d:12:cb:4b:07:da:19:6c:fd:e0:
c4:90:12:6b:ce:7e:04:4b:9d:c8:2e:f5:d0:4d:5c:
40:44:87:11:dc:ae:e0:6d:66:34:02:7a:d7:7b:0c:
aa:93:fb:f9:94:d1:85:35:fa:3a:49:47:17:a8:56:
1b:97:cf:99:52:e3:1e:e7:1a:56:25:ef:e5:c6:5a:
95:4c:b4:6a:cc:ba:af:22:b1:06:60:bd:ec:ee:06:
4e:c1:20:32:8c:02:0d:59:27:38:77:db:76:17:00:
7f:dd:2f:cb:e2:80:af:dc:c8:c9:a7:8c:3e:52:31:
7a:3c:ce:e8:4a:8d:47:14:59:48:78:bb:9f:83:40:
35:e3:28:33:ec:9e:1d:eb:50:d8:2b:0d:92:59:6f:
36:2e:d7:43:84:70:ca:f9:ed:67:26:6b:1d:33:ef:
55:10:7d:e0:b6:09:9e:b4:de:9c:59:d1:6d:e6:c4:
2d:82:45:57:0c:0c:f1:86:37:7d:d2:7d:db:88:12:
89:86:dc:e6:7d:94:7f:6f:4e:19:3d:59:bc:bd:b0:
d0:32:a5:02:b1:76:7e:a6:35:7a:21:88:ef:3c:d9:
c1:21:6e:a0:a5:78:8f:bb:6b:bb:57:8e:de:0b:6c:
15:f1:46:3a:59:08:ba:a0:33:3f:44:dc:36:2e:53:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201444
203333
Signature Algorithm: sha256WithRSAEncryption
1c:2e:e4:89:3e:11:12:a4:27:8e:b7:42:30:b3:ae:f7:8d:6e:
8c:20:dc:40:67:6a:0a:a1:b1:e2:a2:de:e9:7f:5d:ce:80:34:
54:ed:ee:d6:28:f3:49:fa:20:a0:0c:4f:90:cb:eb:4b:d9:13:
98:53:71:07:48:51:16:74:63:b8:9a:53:af:70:43:97:18:07:
11:df:93:16:00:b3:79:80:a3:af:70:66:d6:65:36:00:fe:b3:
e6:e4:96:51:d1:fd:43:b2:43:81:34:4e:0e:86:4c:86:da:60:
f6:1b:38:18:b6:cc:63:c9:5e:5e:5b:c3:46:b9:79:29:46:ff:
a6:5c:d7:4d:15:5d:e4:c4:b7:bf:34:a8:c3:48:52:b1:74:6a:
54:2b:d3:58:db:0c:56:c5:bf:67:f9:b4:2c:dc:12:a9:36:0d:
04:cf:bb:45:0e:2d:02:bd:e6:d6:b4:53:9b:ca:d5:7a:e7:c1:
91:f1:b4:80:d8:ea:32:38:69:14:eb:fb:7d:91:82:f4:5b:09:
fb:76:5a:6d:1e:d7:96:65:a2:50:c3:ff:36:a2:e3:e8:8c:da:
be:b5:fd:d3:fe:53:e4:82:6c:70:15:e3:c3:71:17:1f:c5:70:
76:fb:18:42:c3:5c:bf:de:0f:f5:2d:c8:ba:ab:22:51:45:d1:
0e:e4:94:11
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIbvT3seUZ38ggBKt5dMSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTkyMDJhZTY3YjA0NjUzNDdkNmRkZjkwZjY0NjJmYWU2ZTRlNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofbjH20Sy0sH2hls/eDEkBJrzn4E
S53ILvXQTVxARIcR3K7gbWY0AnrXewyqk/v5lNGFNfo6SUcXqFYbl8+ZUuMe5xpW
Je/lxlqVTLRqzLqvIrEGYL3s7gZOwSAyjAINWSc4d9t2FwB/3S/L4oCv3MjJp4w+
UjF6PM7oSo1HFFlIeLufg0A14ygz7J4d61DYKw2SWW82LtdDhHDK+e1nJmsdM+9V
EH3gtgmetN6cWdFt5sQtgkVXDAzxhjd90n3biBKJhtzmfZR/b04ZPVm8vbDQMqUC
sXZ+pjV6IYjvPNnBIW6gpXiPu2u7V47eC2wV8UY6WQi6oDM/RNw2LlNsQwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFB6SAq5nsEZTR9bd+Q9kYvrm5OZDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzVlZmRk
NS0wY2NjLTQyNWYtOTMwMS01NDBhMzQ4ZGQyMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNWVmZGQ1
LTBjY2MtNDI1Zi05MzAxLTU0MGEzNDhkZDIyMy8xL0hwSUNybWV3UmxOSDF0MzVE
MlJpLXViazVrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMS5AIDAxpFMA0GCSqGSIb3DQEBCwUAA4IBAQAcLuSJ
PhESpCeOt0Iws673jW6MINxAZ2oKobHiot7pf13OgDRU7e7WKPNJ+iCgDE+Qy+tL
2ROYU3EHSFEWdGO4mlOvcEOXGAcR35MWALN5gKOvcGbWZTYA/rPm5JZR0f1DskOB
NE4OhkyG2mD2GzgYtsxjyV5eW8NGuXkpRv+mXNdNFV3kxLe/NKjDSFKxdGpUK9NY
2wxWxb9n+bQs3BKpNg0Ez7tFDi0CvebWtFObytV658GR8bSA2OoyOGkU6/t9kYL0
Wwn7dlptHteWZaJQw/82ouPojNq+tf3T/lPkgmxwFePDcRcfxXB2+xhCw1y/3g/1
Lci6qyJRRdEO5JQR
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:56:15 2024 by rpki-client on console-ams.rpki-client.org