Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
File: hIkfjbCMEQ2bW160xalXnkEzyBY.cer (raw, json)
Hash identifier: 9wkK4C0D+EvwllG3iTIrzFIo3UaLpaej6TKcWIpL9GQ=
Subject key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5EC94B92F153ACDB391086141480CBF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:11:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c9:4b:92:f1:53:ac:db:39:10:86:14:14:80:cb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:66:33:05:72:dd:ea:06:8e:32:89:b5:e5:
09:a2:d5:b2:92:82:24:75:c0:e0:6b:7f:63:7f:c6:
48:2e:ff:a5:d3:a7:c5:a5:35:c7:d0:c9:c7:36:54:
4e:06:13:ae:f3:7e:6b:86:95:aa:94:02:17:97:93:
e2:4f:4b:53:e8:46:5c:b0:56:60:96:c9:e0:4f:06:
1e:bc:64:67:62:a2:c4:94:ea:0a:41:f7:f0:43:28:
5d:2a:46:66:06:21:c2:2d:20:a1:90:bb:23:ac:eb:
de:76:aa:f9:68:e5:97:da:5c:b1:f9:d5:55:e5:8a:
0e:27:d6:d7:05:03:61:48:b5:76:2d:a0:6b:9e:15:
fe:ff:7a:43:9f:b4:2e:11:b5:26:3a:cf:c9:c5:91:
67:aa:b7:e7:53:ca:99:b8:5c:aa:cc:52:3b:e8:34:
20:f0:13:c2:02:4f:d6:3f:5c:af:5c:dc:28:65:db:
f9:1b:67:9f:fa:61:8d:91:ea:e3:ca:8c:b2:80:f1:
e5:01:72:45:2b:c8:84:30:a5:54:5e:87:eb:5b:a2:
86:e0:8e:63:74:44:85:97:f4:dc:82:98:be:b3:1f:
7a:a0:bc:87:c1:3c:5b:b8:1c:34:97:8c:db:dd:9c:
8c:9b:86:9d:19:b9:08:aa:4c:8c:52:04:c8:76:4a:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:9c:39:54:69:16:b5:06:f0:61:fa:ad:6a:76:d4:15:46:
92:5e:70:1a:0b:18:61:5b:19:7a:6d:bc:f6:19:c8:93:53:5a:
e0:70:8a:70:6d:1a:3b:78:ea:5a:4a:4a:58:82:45:de:af:62:
b1:10:02:18:11:64:6f:6e:fe:5d:87:e4:65:08:58:5c:b6:8f:
fa:24:25:4c:51:eb:a2:f5:e4:7e:9a:61:51:7c:45:c9:fb:b3:
83:2f:32:10:eb:55:12:44:dd:09:6f:ef:bf:d4:3b:3f:37:55:
6b:79:e5:3a:d3:54:5a:83:86:98:58:22:2b:c1:7c:a6:45:91:
5c:54:dd:22:f2:c3:8b:b2:32:ca:2f:1a:a0:7d:67:60:cc:ea:
4e:84:a1:ec:04:ab:1f:7f:3e:78:b5:3b:37:16:c4:eb:3f:60:
69:a0:b1:de:10:0e:1b:91:ea:69:12:01:e4:36:ef:57:66:8c:
a5:27:f8:81:39:ea:9a:51:09:be:6d:91:82:7a:38:87:23:06:
a0:5e:9d:c2:e7:51:53:64:02:5f:43:5d:fb:15:44:d9:80:7b:
3c:a3:c5:fd:c7:8c:e2:ce:60:ad:91:03:f2:be:90:53:98:66:
de:d4:a3:30:ae:51:fd:a5:43:45:1c:be:fc:57:d5:27:49:d6:
fc:c3:4c:5d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY1eyUuS8VOs2zkQhhQUgMvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTMxMDkxMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDg5MWY4ZGIwOGMxMTBkOWI1YjVlYjRjNWE5NTc5ZTQxMzNjODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsehmMwVy3eoGjjKJteUJotWykoIk
dcDga39jf8ZILv+l06fFpTXH0MnHNlROBhOu835rhpWqlAIXl5PiT0tT6EZcsFZg
lsngTwYevGRnYqLElOoKQffwQyhdKkZmBiHCLSChkLsjrOvedqr5aOWX2lyx+dVV
5YoOJ9bXBQNhSLV2LaBrnhX+/3pDn7QuEbUmOs/JxZFnqrfnU8qZuFyqzFI76DQg
8BPCAk/WP1yvXNwoZdv5G2ef+mGNkerjyoyygPHlAXJFK8iEMKVUXofrW6KG4I5j
dESFl/Tcgpi+sx96oLyHwTxbuBw0l4zb3ZyMm4adGbkIqkyMUgTIdkrHlwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFISJH42wjBENm1tetMWpV55BM8gWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2E4YTVm
OC1mMDE4LTQwYzktYmVmNy0zNGU5Y2MzZDU2ZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYThhNWY4
LWYwMTgtNDBjOS1iZWY3LTM0ZTljYzNkNTZkNC8xL2hJa2ZqYkNNRVEyYlcxNjB4
YWxYbmtFenlCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwSFpMA0GCSqGSIb3DQEBCwUAA4IBAQByI5w5
VGkWtQbwYfqtanbUFUaSXnAaCxhhWxl6bbz2GciTU1rgcIpwbRo7eOpaSkpYgkXe
r2KxEAIYEWRvbv5dh+RlCFhcto/6JCVMUeui9eR+mmFRfEXJ+7ODLzIQ61USRN0J
b++/1Ds/N1VreeU601Rag4aYWCIrwXymRZFcVN0i8sOLsjLKLxqgfWdgzOpOhKHs
BKsffz54tTs3FsTrP2BpoLHeEA4bkeppEgHkNu9XZoylJ/iBOeqaUQm+bZGCejiH
IwagXp3C51FTZAJfQ137FUTZgHs8o8X9x4zizmCtkQPyvpBTmGbe1KMwrlH9pUNF
HL78V9UnSdb8w0xd
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:52 2024 by rpki-client on console-ams.rpki-client.org