Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
File: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer (raw, json)
Hash identifier: sg6Q1VEa1yPcp6b8+t0bN7uWJJsgNvFOnNmoKZ8Pihg=
Subject key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FE77CA8B6CFD7CD7F4E766DBE12DD8486
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Jun 2024 08:20:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205394
AS: 206637
AS: 207827
IP: 46.226.72.0/21
IP: 139.28.100.0/22
IP: 185.176.124.0/22
IP: 185.180.172.0/22
IP: 185.201.164.0/22
IP: 2a00:5a00::/32
IP: 2a09:540::/29
IP: 2a0a:ab80::/32
IP: 2a0a:c840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:7c:a8:b6:cf:d7:cd:7f:4e:76:6d:be:12:dd:84:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 08:20:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:c0:5f:f4:df:9c:1b:97:9e:81:e7:21:b7:
f0:fa:69:46:97:77:b9:14:03:89:08:6b:8c:7b:49:
79:be:7b:7e:ce:52:9a:5c:34:87:53:9f:97:eb:42:
05:30:7a:39:86:58:ee:83:5c:34:ca:85:6a:0c:74:
ce:3c:85:b0:0b:28:08:4b:eb:a0:65:82:b9:8a:1d:
42:f6:90:9b:a6:42:14:5b:d0:24:8d:f5:3a:b1:d8:
fe:1d:2b:f4:9a:41:30:d7:52:7a:30:b8:e1:b3:f1:
e6:63:ef:ad:6c:e5:86:31:62:31:6c:c4:e5:1f:38:
83:d3:78:16:9d:34:7b:ac:b6:ad:b6:fb:e7:47:46:
04:4e:e1:15:54:79:b5:00:20:20:b4:53:49:e6:29:
77:6a:45:2e:d2:8d:5c:63:25:2d:e0:37:15:a8:9d:
b1:e2:75:47:59:86:f5:93:d5:52:28:73:ef:4f:ec:
b1:fb:10:a2:56:24:d6:c9:aa:e8:1c:70:d5:fd:4b:
dc:dd:3c:4c:39:13:93:d0:b6:06:57:cc:f0:73:20:
a7:ae:6a:24:90:33:39:ce:ff:b3:9a:22:52:19:32:
e1:40:a4:f9:e0:8f:9e:0f:a6:7e:16:41:b7:66:b3:
0c:80:8f:25:99:d0:8a:76:3c:91:e7:3b:bd:d9:49:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
139.28.100.0/22
185.176.124.0/22
185.180.172.0/22
185.201.164.0/22
IPv6:
2a00:5a00::/32
2a09:540::/29
2a0a:ab80::/32
2a0a:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205394
206637
207827
Signature Algorithm: sha256WithRSAEncryption
a4:d7:29:fb:08:0e:2b:13:aa:bb:77:6e:97:1f:49:d6:49:61:
14:e3:35:da:8a:0e:dc:a5:9d:cb:70:54:9b:9d:cd:0d:c1:ce:
f8:5b:8f:91:e1:1a:93:4b:6c:96:83:dd:2e:36:5d:49:27:35:
f7:ff:43:b3:bf:d2:07:6c:f2:65:2e:2c:3e:7d:4c:f1:6d:83:
8f:53:93:2d:25:b1:a7:ab:e2:ed:e9:dc:c9:d2:6d:30:8b:fc:
f8:96:e2:7d:5c:cd:01:82:f6:61:01:9c:9f:c5:ac:33:54:f2:
e6:30:0a:b6:fe:5e:c4:3b:c2:85:00:c7:5e:08:27:22:06:cf:
c0:69:34:9d:54:66:29:a1:80:1f:27:32:cf:2f:0c:20:96:d4:
ef:73:4e:58:a1:88:20:0b:ff:50:03:50:3f:cf:6d:71:27:31:
fd:0e:0b:3c:8e:55:e0:ae:ab:3e:01:e2:97:41:5a:44:f3:ea:
6d:48:32:b9:52:42:73:50:9d:68:23:87:55:74:68:df:ee:48:
e4:c4:54:fd:be:5b:df:37:ac:82:60:52:50:02:83:4f:c1:e0:
a0:ac:f1:b8:99:91:e6:52:fe:c6:52:65:70:06:f4:2d:66:fa:
88:42:73:22:9a:4e:df:ba:3f:ff:a2:40:79:b2:d6:a9:5b:7e:
ce:74:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:31:14 2024 by rpki-client on console-ams.rpki-client.org