Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
File: _HlIirThrA9L1GfStNNiHGsY7qA.cer (raw, json)
Hash identifier: v36VAIaagoQltRkRTbtu1VJ95Xqb3oP3MfiiwtuVFu4=
Subject key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DF1C20AC925E01112C76DB6C0FDA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206765
IP: 185.177.16.0/22
IP: 2a0a:2c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f1:c2:0a:c9:25:e0:11:12:c7:6d:b6:c0:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:d3:aa:b7:1b:e4:06:ac:7e:41:84:fa:4f:
e7:86:8c:7e:d5:71:3f:67:62:33:38:c5:a4:0c:b8:
f2:50:ec:d5:07:04:aa:11:08:3d:d7:ae:c1:68:ea:
41:8e:10:ee:8c:6a:d0:91:fd:e4:80:50:8a:3e:74:
34:f6:d6:f3:b9:46:95:34:ee:48:7c:cb:6d:30:85:
86:96:de:54:3d:ac:82:de:8a:30:42:83:73:72:1d:
ee:68:ae:7a:e8:85:e5:86:0a:a1:61:1a:0e:8b:7d:
9b:d8:0a:d8:cb:8a:95:f6:65:ce:ef:c3:f5:f1:c4:
ae:11:96:80:fe:e0:e3:0c:62:30:dd:7e:f7:67:a1:
26:91:47:af:10:fc:0b:ae:95:14:7c:72:1b:fc:0e:
ec:1d:e9:6b:72:4a:ba:3f:0b:ee:13:df:81:d0:3e:
1e:47:86:88:a5:30:bd:e1:4e:03:fd:17:ca:0d:3a:
f0:24:c4:84:4f:3b:91:b6:84:1d:21:9e:8e:51:85:
d5:17:a0:5c:52:91:ed:ba:a4:de:be:22:b8:98:77:
53:19:06:bb:79:01:ee:53:12:e3:72:fd:70:b0:81:
d2:d8:5e:e3:9f:1b:a5:61:11:95:47:6e:db:f1:9a:
ed:12:e5:f6:fa:0e:3b:06:59:bd:99:1b:38:8d:40:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.16.0/22
IPv6:
2a0a:2c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206765
Signature Algorithm: sha256WithRSAEncryption
52:19:5f:4a:22:52:d5:b6:88:a7:ec:d1:64:5f:ec:9c:52:c4:
e8:b9:2e:38:0e:6f:4c:32:d3:ce:38:a5:22:bd:82:b6:eb:1a:
56:48:fd:f5:9c:3e:22:e1:41:96:a5:a4:1b:a2:14:70:20:75:
5a:d4:ba:f1:26:25:c6:86:fc:3a:6d:0f:3e:cf:a7:0c:c4:d1:
e9:25:56:43:73:04:33:96:61:9b:03:82:dd:ec:92:73:4c:c2:
75:50:4c:fe:73:3b:b8:5b:72:4e:bc:89:65:17:3c:ae:6f:c9:
2d:b5:7d:b4:1a:4e:9b:56:f9:e6:7a:cc:1e:b6:ce:ef:ef:45:
f1:23:0d:e6:0d:93:f2:a6:94:12:fc:89:df:31:06:09:63:d0:
5f:89:0b:97:e0:b5:6e:60:d4:50:fa:68:92:e6:ad:d4:1f:27:
29:09:f5:aa:9b:69:77:d1:e4:be:57:d4:4b:35:97:b3:05:ea:
c3:b2:2e:f4:67:ff:03:a0:a9:e3:65:95:5e:39:d5:60:9e:aa:
4e:4b:7a:51:2a:95:7d:88:dc:0c:2c:c8:c9:e4:91:af:9c:2d:
2a:09:c1:64:a3:cc:18:a9:3d:e0:6f:d0:22:ab:2f:69:bf:5f:
0a:ce:1e:dc:c5:22:fc:32:58:0f:95:f7:8e:36:5c:a6:4c:01:
97:7e:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:16 2024 by rpki-client on console-ams.rpki-client.org