Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
File: HyAOBxBBRee6mHap0-55Kgc2TTY.cer (raw, json)
Hash identifier: amBPBUCjNYxq5eWIwz+epVk1UKeVp/P1A6njE2iaIDE=
Subject key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192350C120F36668B72A821D0915CA51505
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Sep 2024 19:53:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60614
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:0c:12:0f:36:66:8b:72:a8:21:d0:91:5c:a5:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 27 19:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:38:23:ae:6c:a4:73:8a:37:fa:fd:d2:aa:
ed:e1:0f:8a:ae:84:23:c6:e9:04:3e:1c:5e:e9:7a:
cf:29:38:8a:02:5e:4a:42:67:95:01:b8:df:2d:12:
1b:a6:2a:46:8b:b6:cd:e3:e0:4a:ca:fa:28:16:b3:
7b:d0:41:36:0d:2a:33:91:5c:98:b7:f7:bc:44:c2:
5c:1b:22:68:2c:ef:47:12:af:cb:58:e7:df:01:85:
12:72:b3:58:50:0a:79:4c:1a:08:9b:80:ea:2e:ce:
16:d9:cc:17:d9:b7:d8:77:5f:66:d2:f0:88:f6:f8:
73:ae:4a:77:21:c5:f7:dc:c4:cf:7e:c8:bc:4e:73:
07:e1:1b:97:30:11:68:29:7e:04:39:71:ca:ec:47:
d6:a8:ef:a7:97:10:c1:cd:05:ee:a6:51:1c:b3:ba:
da:0c:b2:f5:37:c0:1e:d1:39:a2:37:cc:4b:2c:b6:
ad:68:cf:d5:36:0d:89:65:74:bd:e4:4b:97:ed:c2:
dd:b8:4a:cc:24:59:32:4e:ee:de:18:71:db:9a:91:
12:b8:a1:e5:1d:40:80:88:d4:05:48:16:51:d9:61:
58:0e:ea:4b:82:cb:12:ab:0d:98:48:9d:c1:6b:48:
8f:26:c3:7d:0a:2e:45:26:98:00:77:cf:53:d7:9c:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60614
Signature Algorithm: sha256WithRSAEncryption
4a:e9:ce:5e:d8:d1:e0:70:00:aa:23:2e:6e:23:fe:f7:90:6b:
92:2a:63:d2:12:42:61:5b:61:5d:c5:81:a1:4d:d6:28:bc:30:
3b:70:0a:ed:b3:1c:03:fe:5a:f5:f1:92:5e:f2:d6:d5:32:52:
a0:aa:2c:de:41:51:ab:2b:71:82:5a:e8:be:3e:82:65:a6:1e:
25:3a:66:60:f1:5e:51:f8:08:1c:74:35:f4:61:d3:44:ee:e4:
95:e3:cd:27:c2:de:9d:2e:67:c4:d8:8b:8b:63:c9:02:0d:94:
4f:db:22:90:03:2b:a8:37:b2:a8:ba:3e:79:35:00:d5:ba:1d:
87:d5:b3:ba:71:20:62:52:23:6a:ad:01:ab:cc:a5:4b:17:cf:
c8:1f:95:78:42:e8:66:be:bf:a2:97:3a:45:fc:1e:37:39:8f:
f4:2b:53:ba:0a:4e:59:77:d9:fc:52:f9:76:fc:78:b9:33:12:
6d:39:9c:d1:8e:18:4f:ca:b1:97:3f:13:f3:40:b6:f2:6e:08:
60:37:6e:99:14:a8:3d:67:82:d8:b3:12:ac:76:7c:50:06:00:
1f:ec:34:c0:75:3b:02:2c:e1:a8:f8:da:10:70:1e:db:27:cb:
df:77:15:07:10:82:47:7e:c4:42:5a:d7:1b:f4:fb:88:80:79:
8c:f2:fc:9e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZI1DBIPNmaLcqgh0JFcpRUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTI3MTk1MzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjIwMGUwNzEwNDE0NWU3YmE5ODc2YTlkM2VlNzkyYTA3MzY0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXw4I65spHOKN/r90qrt4Q+KroQj
xukEPhxe6XrPKTiKAl5KQmeVAbjfLRIbpipGi7bN4+BKyvooFrN70EE2DSozkVyY
t/e8RMJcGyJoLO9HEq/LWOffAYUScrNYUAp5TBoIm4DqLs4W2cwX2bfYd19m0vCI
9vhzrkp3IcX33MTPfsi8TnMH4RuXMBFoKX4EOXHK7EfWqO+nlxDBzQXuplEcs7ra
DLL1N8Ae0TmiN8xLLLataM/VNg2JZXS95EuX7cLduErMJFkyTu7eGHHbmpESuKHl
HUCAiNQFSBZR2WFYDupLgssSqw2YSJ3Ba0iPJsN9Ci5FJpgAd89T15yedwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFB8gDgcQQUXnuph2qdPueSoHNk02MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzQ2ZGFi
Zi05NjI2LTRkMWYtYTg5ZS03NzVhN2VjMWNhMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNDZkYWJm
LTk2MjYtNGQxZi1hODllLTc3NWE3ZWMxY2EzMy8xL0h5QU9CeEJCUmVlNm1IYXAw
LTU1S2djMlRUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDsxjANBgkqhkiG9w0BAQsFAAOCAQEASunOXtjR4HAA
qiMubiP+95Brkipj0hJCYVthXcWBoU3WKLwwO3AK7bMcA/5a9fGSXvLW1TJSoKos
3kFRqytxglrovj6CZaYeJTpmYPFeUfgIHHQ19GHTRO7klePNJ8LenS5nxNiLi2PJ
Ag2UT9sikAMrqDeyqLo+eTUA1bodh9WzunEgYlIjaq0Bq8ylSxfPyB+VeELoZr6/
opc6RfweNzmP9CtTugpOWXfZ/FL5dvx4uTMSbTmc0Y4YT8qxlz8T80C28m4IYDdu
mRSoPWeC2LMSrHZ8UAYAH+w0wHU7AizhqPjaEHAe2yfL33cVBxCCR37EQlrXG/T7
iIB5jPL8ng==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:37 2024 by rpki-client on console-fra.rpki-client.org