Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
File: Hzspn37Z9UTXv5ALWcz4iadk30g.cer (raw, json)
Hash identifier: yZuEfA+PAxnoVDrrvWsq33rimBJwCEoJ3Hea5iQkE/4=
Subject key identifier: 1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49386B5262C2B29106C324BF6D405B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201524
IP: 185.71.180.0/22
IP: 2a03:3aa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:86:b5:26:2c:2b:29:10:6c:32:4b:f6:d4:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:46:d7:7b:5d:0d:ef:48:24:97:5f:62:58:
c7:2f:ec:1c:71:b0:85:a4:14:01:9e:a0:9d:f1:49:
d3:e2:1a:f7:d4:a2:ab:50:ec:29:70:ed:18:27:10:
34:9e:a6:cf:c2:d8:59:93:a9:ed:67:44:9d:0b:88:
db:f7:f8:c9:50:f5:c6:e1:92:03:06:0d:c3:9c:3d:
48:5e:df:0b:94:f1:0f:32:9a:5f:db:b8:11:91:3d:
74:24:11:97:17:66:0a:e1:a8:64:ff:cf:e4:cc:93:
a8:fd:fd:8c:9a:df:de:d2:fb:15:88:06:ef:a5:0c:
a5:79:98:2c:d4:42:4b:c4:04:2e:51:59:83:31:16:
0b:7a:26:31:87:aa:c3:cf:6b:f3:2a:0f:0a:61:23:
d3:e8:e4:60:81:17:72:3a:7f:34:92:74:a6:e5:d0:
55:6e:11:1f:9e:a1:08:a6:b8:79:fe:6d:39:4a:b2:
4c:30:90:14:60:8c:3b:99:b8:0e:d0:ee:92:d6:a9:
cd:1d:4a:1d:db:21:10:19:c0:5f:f1:fa:90:77:0a:
54:82:cd:3b:68:c6:6d:77:12:d1:1a:0a:4a:a6:c6:
82:74:66:35:53:61:82:5f:42:92:a6:41:4f:24:51:
cb:3b:8c:eb:6a:7f:a4:56:00:07:ef:73:b7:3c:92:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.180.0/22
IPv6:
2a03:3aa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201524
Signature Algorithm: sha256WithRSAEncryption
7e:0c:e0:62:ff:2c:e4:a4:a8:1d:79:5c:a8:a2:26:1d:69:36:
23:ea:ec:1c:67:fb:92:15:30:d4:73:4a:fb:77:7c:a7:01:5d:
da:b3:13:32:75:15:92:5c:cc:34:4e:10:3b:f4:ff:56:9c:9c:
e6:25:1a:6f:90:c9:ca:60:7f:06:fa:11:b1:c7:b6:3e:f1:bd:
75:26:4d:51:e8:9e:81:fe:4b:2f:08:da:f5:dd:db:e7:40:6f:
36:75:24:41:2e:c5:e4:df:84:1c:e9:78:e8:b4:52:4d:05:28:
8c:2b:99:c0:97:5e:48:43:52:83:39:2b:42:da:a3:e0:4c:71:
11:d1:97:a3:c1:22:44:3d:f8:e9:c3:68:67:61:86:11:7a:1e:
87:1b:17:16:91:3b:23:e0:71:5a:fa:54:6c:81:ee:42:a3:73:
9c:b4:b2:eb:44:f3:03:1b:a3:54:a3:c3:fa:b8:b8:21:b7:80:
a0:06:0c:d8:7f:df:6b:9a:e8:1d:ea:bb:da:cd:5a:61:a0:7f:
f4:36:e7:b4:00:ee:a8:98:f5:6f:24:88:94:e8:f1:b7:55:6f:
09:b2:99:d6:8d:91:6c:64:de:0a:91:56:b2:9d:51:15:96:c2:
fe:f5:7e:52:92:ce:ff:fe:b7:63:ea:10:cc:b5:00:d9:d3:2c:
0b:9d:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:58:07 2024 by rpki-client on console-fra.rpki-client.org