Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.cer (raw, json)
Hash identifier: 95sUzbaIHL73B1HX4aSzj3Xw23uKyBPvxc9Tca582h0=
Subject key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424F68AC4E3936DCC728F2D3B24FB72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57531
IP: 91.232.188.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f6:8a:c4:e3:93:6d:cc:72:8f:2d:3b:24:fb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:e4:7c:9c:a2:47:d5:45:66:f7:0c:73:95:
34:45:13:ac:31:50:3d:0d:66:60:0b:f8:3c:f7:2a:
f6:e8:0d:c0:af:88:82:0d:3d:0e:ab:aa:ed:a4:cf:
50:74:e2:1f:59:f2:0e:a5:06:1e:70:ca:d2:82:57:
64:9f:43:d3:1e:db:06:b8:3e:5b:bf:20:c6:e0:e3:
24:71:7e:3b:bf:d3:0e:ec:f8:8c:d8:c6:fb:99:1c:
35:9d:9a:af:7c:9c:bd:46:f8:36:d9:d9:0e:8d:36:
40:2a:37:24:65:ad:ea:e0:dc:fd:ed:64:f2:ee:3d:
cc:7d:3e:7e:04:49:51:4f:35:9e:81:00:fd:b9:c7:
c2:16:16:27:33:46:3a:4f:f1:7f:2b:46:38:04:1d:
3d:10:aa:85:8b:f4:1c:66:c0:e8:0d:5d:b6:53:c1:
c0:6e:dd:13:05:ba:35:67:f4:f4:a1:9c:80:63:46:
e9:c7:49:6f:62:fb:5e:bf:6a:b0:17:ea:4a:74:5c:
a1:2e:e3:09:d2:c1:b4:1f:ad:1e:9e:f5:cd:97:ed:
a7:09:68:20:c2:0a:ac:1d:89:2c:50:43:75:16:e9:
e9:43:c8:ae:7a:64:2e:0e:d5:db:67:90:2d:2c:5f:
ab:84:13:49:88:15:3b:1f:23:26:bc:cc:7e:c7:ba:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.188.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57531
Signature Algorithm: sha256WithRSAEncryption
40:35:df:b5:6a:6e:5f:7f:6e:ce:77:2d:47:a9:92:c0:f4:e1:
cb:31:e9:3c:1c:31:8c:e5:69:ec:bd:91:65:af:57:8d:91:38:
7b:9f:4e:f1:a6:3c:23:d6:09:6b:f5:7d:67:a4:c3:cc:3a:16:
49:81:93:f1:02:a5:76:4b:1f:43:99:52:d4:ac:d7:1b:dd:b2:
f1:f8:8d:c2:76:b2:d1:65:36:43:e9:b0:2b:ba:70:cc:71:88:
3a:2e:d4:f5:78:06:c1:77:62:5f:ce:18:1d:23:08:9e:91:c1:
65:bd:a3:32:34:26:73:88:74:91:1a:94:e1:67:40:e0:50:c5:
76:67:0b:bf:b5:29:96:78:45:f5:be:4c:fc:f1:9c:f7:a7:7a:
c7:8f:01:9d:ea:c3:9f:b3:f4:82:2e:1b:a2:a2:3e:13:92:e5:
1e:89:97:d8:e4:84:a8:33:43:ec:99:d0:30:4e:6c:8e:a5:5c:
ef:75:eb:81:c0:cd:50:44:d5:3f:17:da:84:cd:63:23:30:a8:
8c:fe:22:56:e2:59:70:1a:bf:89:09:7e:e4:ec:0a:ed:86:b9:
6f:63:01:0d:ce:6a:d3:24:8d:bf:b9:ea:7c:8d:fa:ef:14:4b:
da:11:69:98:2b:b3:f5:8e:53:67:e1:7e:61:90:0b:4f:7a:bb:
37:ef:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:39:10 2024 by rpki-client on console-ams.rpki-client.org