Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
File: HpICrmewRlNH1t35D2Ri-ubk5kM.cer (raw, json)
Hash identifier: ziOnDYduIIBFMvVebnVkn8cZPqDPJq5eXCwOs3ICJ/s=
Subject key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019223D07870E7166B61BEFA886D2185CB4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Sep 2024 11:35:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203333
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:d0:78:70:e7:16:6b:61:be:fa:88:6d:21:85:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 11:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:e3:1f:6d:12:cb:4b:07:da:19:6c:fd:e0:
c4:90:12:6b:ce:7e:04:4b:9d:c8:2e:f5:d0:4d:5c:
40:44:87:11:dc:ae:e0:6d:66:34:02:7a:d7:7b:0c:
aa:93:fb:f9:94:d1:85:35:fa:3a:49:47:17:a8:56:
1b:97:cf:99:52:e3:1e:e7:1a:56:25:ef:e5:c6:5a:
95:4c:b4:6a:cc:ba:af:22:b1:06:60:bd:ec:ee:06:
4e:c1:20:32:8c:02:0d:59:27:38:77:db:76:17:00:
7f:dd:2f:cb:e2:80:af:dc:c8:c9:a7:8c:3e:52:31:
7a:3c:ce:e8:4a:8d:47:14:59:48:78:bb:9f:83:40:
35:e3:28:33:ec:9e:1d:eb:50:d8:2b:0d:92:59:6f:
36:2e:d7:43:84:70:ca:f9:ed:67:26:6b:1d:33:ef:
55:10:7d:e0:b6:09:9e:b4:de:9c:59:d1:6d:e6:c4:
2d:82:45:57:0c:0c:f1:86:37:7d:d2:7d:db:88:12:
89:86:dc:e6:7d:94:7f:6f:4e:19:3d:59:bc:bd:b0:
d0:32:a5:02:b1:76:7e:a6:35:7a:21:88:ef:3c:d9:
c1:21:6e:a0:a5:78:8f:bb:6b:bb:57:8e:de:0b:6c:
15:f1:46:3a:59:08:ba:a0:33:3f:44:dc:36:2e:53:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203333
Signature Algorithm: sha256WithRSAEncryption
0b:69:8c:79:44:f1:8a:5c:9a:28:ff:d6:44:b5:08:f5:76:90:
ea:40:48:cd:c4:c6:d4:6e:a8:da:9e:73:ee:87:5d:e9:c8:2e:
35:b7:58:17:35:07:4e:6e:ae:8d:52:cb:1f:31:2f:ad:6f:0b:
64:d8:0c:d6:3f:e1:40:39:44:6a:ca:52:98:eb:a6:b8:a0:9c:
70:ae:46:a5:66:92:ff:82:6e:aa:92:06:12:d1:9a:e1:04:87:
68:6d:81:54:14:dd:1c:76:7b:6d:49:d2:e2:be:c6:cd:c4:0b:
4b:c2:45:b9:c4:44:e4:88:0b:57:15:79:aa:82:7a:5f:f3:bb:
bb:6d:00:89:18:a9:92:03:ce:f6:97:56:ae:f1:6c:17:7c:2a:
2b:f2:1b:13:8d:2c:24:d8:9d:0d:31:b6:d9:25:cb:ff:de:4f:
09:af:39:79:9e:fc:cd:17:b8:5a:24:88:39:9b:58:cb:77:b9:
22:1f:21:bb:65:a0:d6:d9:cf:05:17:a7:2f:72:76:cc:7e:aa:
bf:be:14:35:9b:ae:59:28:47:3d:b5:92:29:4f:9e:99:7f:7c:
6f:65:6c:32:35:52:db:ff:7d:51:8e:ce:49:83:10:6c:0a:0b:
d8:2c:72:e0:72:80:16:d3:bc:52:ed:d6:0d:a8:04:77:5c:1f:
b1:93:d7:e3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZIj0Hhw5xZrYb76iG0hhctLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTI0MTEzNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTkyMDJhZTY3YjA0NjUzNDdkNmRkZjkwZjY0NjJmYWU2ZTRlNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofbjH20Sy0sH2hls/eDEkBJrzn4E
S53ILvXQTVxARIcR3K7gbWY0AnrXewyqk/v5lNGFNfo6SUcXqFYbl8+ZUuMe5xpW
Je/lxlqVTLRqzLqvIrEGYL3s7gZOwSAyjAINWSc4d9t2FwB/3S/L4oCv3MjJp4w+
UjF6PM7oSo1HFFlIeLufg0A14ygz7J4d61DYKw2SWW82LtdDhHDK+e1nJmsdM+9V
EH3gtgmetN6cWdFt5sQtgkVXDAzxhjd90n3biBKJhtzmfZR/b04ZPVm8vbDQMqUC
sXZ+pjV6IYjvPNnBIW6gpXiPu2u7V47eC2wV8UY6WQi6oDM/RNw2LlNsQwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFB6SAq5nsEZTR9bd+Q9kYvrm5OZDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzVlZmRk
NS0wY2NjLTQyNWYtOTMwMS01NDBhMzQ4ZGQyMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNWVmZGQ1
LTBjY2MtNDI1Zi05MzAxLTU0MGEzNDhkZDIyMy8xL0hwSUNybWV3UmxOSDF0MzVE
MlJpLXViazVrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaRTANBgkqhkiG9w0BAQsFAAOCAQEAC2mMeUTxilya
KP/WRLUI9XaQ6kBIzcTG1G6o2p5z7odd6cguNbdYFzUHTm6ujVLLHzEvrW8LZNgM
1j/hQDlEaspSmOumuKCccK5GpWaS/4JuqpIGEtGa4QSHaG2BVBTdHHZ7bUnS4r7G
zcQLS8JFucRE5IgLVxV5qoJ6X/O7u20AiRipkgPO9pdWrvFsF3wqK/IbE40sJNid
DTG22SXL/95PCa85eZ78zRe4WiSIOZtYy3e5Ih8hu2Wg1tnPBRenL3J2zH6qv74U
NZuuWShHPbWSKU+emX98b2VsMjVS2/99UY7OSYMQbAoL2Cxy4HKAFtO8Uu3WDagE
d1wfsZPX4w==
-----END CERTIFICATE-----
Generated at Thu Dec 26 17:03:42 2024 by rpki-client on console-fra.rpki-client.org