Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
File: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer (raw, json)
Hash identifier: B4tzU61EIaG/PGqcdl+X/N5J2SCgO7MOvuExvuoOcp4=
Subject key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEA90D02A3ADC355882C7FE449596D172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Feb 2024 12:36:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197529
AS: 205394
AS: 206637
AS: 207827
IP: 46.226.72.0/21
IP: 139.28.100.0/22
IP: 185.176.124.0/22
IP: 185.180.172.0/22
IP: 185.201.164.0/22
IP: 2a00:5a00::/32
IP: 2a09:540::/29
IP: 2a0a:ab80::/32
IP: 2a0a:c840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:90:d0:2a:3a:dc:35:58:82:c7:fe:44:95:96:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 12:36:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:c0:5f:f4:df:9c:1b:97:9e:81:e7:21:b7:
f0:fa:69:46:97:77:b9:14:03:89:08:6b:8c:7b:49:
79:be:7b:7e:ce:52:9a:5c:34:87:53:9f:97:eb:42:
05:30:7a:39:86:58:ee:83:5c:34:ca:85:6a:0c:74:
ce:3c:85:b0:0b:28:08:4b:eb:a0:65:82:b9:8a:1d:
42:f6:90:9b:a6:42:14:5b:d0:24:8d:f5:3a:b1:d8:
fe:1d:2b:f4:9a:41:30:d7:52:7a:30:b8:e1:b3:f1:
e6:63:ef:ad:6c:e5:86:31:62:31:6c:c4:e5:1f:38:
83:d3:78:16:9d:34:7b:ac:b6:ad:b6:fb:e7:47:46:
04:4e:e1:15:54:79:b5:00:20:20:b4:53:49:e6:29:
77:6a:45:2e:d2:8d:5c:63:25:2d:e0:37:15:a8:9d:
b1:e2:75:47:59:86:f5:93:d5:52:28:73:ef:4f:ec:
b1:fb:10:a2:56:24:d6:c9:aa:e8:1c:70:d5:fd:4b:
dc:dd:3c:4c:39:13:93:d0:b6:06:57:cc:f0:73:20:
a7:ae:6a:24:90:33:39:ce:ff:b3:9a:22:52:19:32:
e1:40:a4:f9:e0:8f:9e:0f:a6:7e:16:41:b7:66:b3:
0c:80:8f:25:99:d0:8a:76:3c:91:e7:3b:bd:d9:49:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
139.28.100.0/22
185.176.124.0/22
185.180.172.0/22
185.201.164.0/22
IPv6:
2a00:5a00::/32
2a09:540::/29
2a0a:ab80::/32
2a0a:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197529
205394
206637
207827
Signature Algorithm: sha256WithRSAEncryption
9f:dd:6b:cc:40:c3:c9:1c:57:80:c4:62:bb:d0:24:f2:cd:d1:
15:60:04:e7:27:6c:e6:08:27:21:8f:51:c0:ab:2d:8c:77:0b:
dc:96:05:5e:79:1e:f5:5a:df:aa:c0:70:7f:80:d8:70:d6:8c:
3d:0e:af:2e:43:92:04:66:e5:90:69:1d:b4:3c:5c:ac:54:a7:
ee:30:12:c8:74:9b:9b:ee:fb:fd:77:f9:61:8f:24:72:f4:23:
91:c6:59:c2:33:37:ac:2d:30:13:49:60:b4:d7:27:0c:17:0c:
52:87:91:7e:18:91:89:a1:a3:3b:3f:d7:26:78:a1:c2:ff:54:
da:31:56:0d:82:1b:ac:ad:e9:ab:b9:70:1e:45:0b:04:2f:2b:
a7:c8:82:d7:49:cd:c3:ff:3c:4f:b3:79:78:92:e6:cd:5d:6f:
1a:51:72:30:d1:66:be:06:5d:d9:a8:c1:5a:d8:a1:59:84:cd:
3f:dc:35:28:a1:25:c5:44:ec:1e:2c:8d:bb:4d:01:e8:63:5c:
a7:de:00:9b:0d:a8:c2:bb:43:ec:c2:66:49:93:67:7a:05:0a:
cb:53:46:ca:0b:65:c9:27:5b:1d:de:1a:b3:79:08:03:b8:23:
ee:b8:c5:95:3c:77:24:b2:da:2a:7a:aa:97:ca:01:e8:18:a6:
18:70:e7:76
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgISAY3qkNAqOtw1WILH/kSVltFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjI3MTIzNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWU1ZWZiZjY1ODk3MTYwZDU1YTUyZGMzYTIyYzAxNzg3NmNkMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4/AX/TfnBuXnoHnIbfw+mlGl3e5
FAOJCGuMe0l5vnt+zlKaXDSHU5+X60IFMHo5hljug1w0yoVqDHTOPIWwCygIS+ug
ZYK5ih1C9pCbpkIUW9AkjfU6sdj+HSv0mkEw11J6MLjhs/HmY++tbOWGMWIxbMTl
HziD03gWnTR7rLattvvnR0YETuEVVHm1ACAgtFNJ5il3akUu0o1cYyUt4DcVqJ2x
4nVHWYb1k9VSKHPvT+yx+xCiViTWyaroHHDV/Uvc3TxMOROT0LYGV8zwcyCnrmok
kDM5zv+zmiJSGTLhQKT54I+eD6Z+FkG3ZrMMgI8lmdCKdjyR5zu92UkA1QIDAQAB
o4IC6zCCAucwHQYDVR0OBBYEFB7l779liXFg1VpS3DoiwBeHbNBsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzMzMjQ3
Ny1jODNjLTRmODAtYjFiZS03YzBkYjdiYWUxMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMzMyNDc3
LWM4M2MtNGY4MC1iMWJlLTdjMGRiN2JhZTEzNS8xL0h1WHZ2MldKY1dEVldsTGNP
aUxBRjRkczBHdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF
BwEHAQH/BEwwSjAkBAIAATAeAwQDLuJIAwQCixxkAwQCubB8AwQCubSsAwQCucmk
MCIEAgACMBwDBQAqAFoAAwUDKgkFQAMFACoKq4ADBQMqCshAMCkGCCsGAQUFBwEI
AQH/BBowGKAWMBQCAwMDmQIDAyJSAgMDJy0CAwMr0zANBgkqhkiG9w0BAQsFAAOC
AQEAn91rzEDDyRxXgMRiu9Ak8s3RFWAE5yds5ggnIY9RwKstjHcL3JYFXnke9Vrf
qsBwf4DYcNaMPQ6vLkOSBGblkGkdtDxcrFSn7jASyHSbm+77/Xf5YY8kcvQjkcZZ
wjM3rC0wE0lgtNcnDBcMUoeRfhiRiaGjOz/XJnihwv9U2jFWDYIbrK3pq7lwHkUL
BC8rp8iC10nNw/88T7N5eJLmzV1vGlFyMNFmvgZd2ajBWtihWYTNP9w1KKElxUTs
HiyNu00B6GNcp94Amw2owrtD7MJmSZNnegUKy1NGygtlySdbHd4as3kIA7gj7rjF
lTx3JLLaKnqql8oB6BimGHDndg==
-----END CERTIFICATE-----
Generated at Fri Apr 19 17:24:17 2024 by rpki-client on console-ams.rpki-client.org