Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
File: hUYhlvWiZe4_S4kOKGZyQCCNO68.cer (raw, json)
Hash identifier: ZKFs+0HzwRzLLIOz1zswuSZye5Le0h9TrPaD2pq3XQg=
Subject key identifier: 85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190170C957BCD49F8EC666CDAE27C8955C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 14:00:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214734
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:0c:95:7b:cd:49:f8:ec:66:6c:da:e2:7c:89:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 14:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85462196f5a265ee3f4b890e28667240208d3baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:a0:8f:4f:17:0a:ca:c9:31:97:5e:d2:9d:
e8:89:8f:07:b0:08:98:46:ae:2c:4a:f2:0f:84:46:
e7:eb:c2:a5:2d:20:18:be:81:d8:a0:5f:d6:fb:4c:
76:35:a3:36:61:90:fd:4e:6a:7c:f8:ab:86:27:0e:
9f:14:94:b4:02:e8:e0:7e:6f:4a:5f:80:93:21:26:
8e:e5:5f:68:b2:e5:8a:99:ab:d4:e6:75:e6:af:a9:
92:e0:7d:fb:af:84:42:2e:28:d6:f2:de:cf:32:89:
f6:43:4b:70:6d:97:06:c4:9d:e7:a7:94:08:b3:41:
1e:63:fc:1f:ac:91:d5:e5:c9:d3:ca:73:1d:79:b0:
d5:85:6b:1c:cd:bc:a7:04:79:71:b2:72:34:52:8f:
88:52:36:5d:13:8f:f1:f2:96:fd:c0:6a:e1:dd:3f:
da:28:b8:e5:53:8d:4b:ce:d2:53:0f:fe:6f:70:e9:
98:b6:84:9c:da:6a:4e:4e:6f:99:9e:b1:60:3c:cc:
30:3b:b5:9f:59:23:85:35:fc:62:a9:f9:f6:2c:92:
18:2a:52:7a:5a:24:d7:da:40:d1:d9:0f:0c:2d:e6:
b8:84:1f:cb:3b:df:5a:13:bc:34:4d:6d:9c:5b:97:
f4:40:f8:02:84:2f:05:c6:a1:09:05:33:11:7e:98:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214734
Signature Algorithm: sha256WithRSAEncryption
86:9e:16:50:f3:43:37:e0:cc:d4:3b:db:44:ff:11:73:34:4e:
dc:77:db:72:36:d7:a6:bb:9e:91:93:40:b1:ce:d4:b4:b7:8e:
3f:f8:4f:5e:4e:43:2d:0d:e0:0f:b8:63:13:c8:11:58:1d:ca:
e3:f3:75:b7:1d:dd:73:25:4c:c1:2e:d4:28:16:7e:58:36:68:
02:3e:81:01:94:24:47:ff:a2:8c:63:d6:db:bc:31:46:16:8f:
9b:16:84:08:49:47:0f:5d:3a:5d:5a:8a:ec:c1:fc:a7:ce:f9:
6e:24:ef:73:6d:55:f0:bd:19:6a:a6:53:d0:a3:20:6b:d4:a0:
0d:d1:ee:99:37:b4:81:3f:32:68:75:04:56:ea:a0:ac:e0:fe:
f7:03:db:2a:ee:6c:d1:1a:32:c2:58:3d:d9:17:2f:f2:34:00:
eb:94:9f:a5:7c:24:28:b5:a7:71:b4:ed:9a:0c:42:c0:27:1d:
55:cc:12:9d:f0:70:51:8e:ac:d8:28:c8:1b:34:a9:72:e1:21:
e5:8f:89:3d:71:5c:30:f2:8b:e7:06:22:5d:8a:17:9f:bb:90:
df:3b:ee:33:a6:29:91:8a:50:3a:e4:ea:9c:c1:ae:87:6f:f1:
08:f0:5b:6c:31:0d:39:c0:81:20:f1:d0:17:6d:e3:81:73:b8:
68:19:c1:af
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZAXDJV7zUn47GZs2uJ8iVXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjE0MTQwMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ2MjE5NmY1YTI2NWVlM2Y0Yjg5MGUyODY2NzI0MDIwOGQzYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiGgj08XCsrJMZde0p3oiY8HsAiY
Rq4sSvIPhEbn68KlLSAYvoHYoF/W+0x2NaM2YZD9Tmp8+KuGJw6fFJS0Aujgfm9K
X4CTISaO5V9osuWKmavU5nXmr6mS4H37r4RCLijW8t7PMon2Q0twbZcGxJ3np5QI
s0EeY/wfrJHV5cnTynMdebDVhWsczbynBHlxsnI0Uo+IUjZdE4/x8pb9wGrh3T/a
KLjlU41LztJTD/5vcOmYtoSc2mpOTm+ZnrFgPMwwO7WfWSOFNfxiqfn2LJIYKlJ6
WiTX2kDR2Q8MLea4hB/LO99aE7w0TW2cW5f0QPgChC8FxqEJBTMRfpgl1QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIVGIZb1omXuP0uJDihmckAgjTuvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzE1YWU3
YS04ODNlLTQ1ZGMtYTgwNC1hYTY0MzRlNTRmMzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvMTVhZTdh
LTg4M2UtNDVkYy1hODA0LWFhNjQzNGU1NGYzOS8xL2hVWWhsdldpWmU0X1M0a09L
R1p5UUNDTk82OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNGzjANBgkqhkiG9w0BAQsFAAOCAQEAhp4WUPNDN+DM
1DvbRP8RczRO3HfbcjbXpruekZNAsc7UtLeOP/hPXk5DLQ3gD7hjE8gRWB3K4/N1
tx3dcyVMwS7UKBZ+WDZoAj6BAZQkR/+ijGPW27wxRhaPmxaECElHD106XVqK7MH8
p875biTvc21V8L0ZaqZT0KMga9SgDdHumTe0gT8yaHUEVuqgrOD+9wPbKu5s0Roy
wlg92Rcv8jQA65SfpXwkKLWncbTtmgxCwCcdVcwSnfBwUY6s2CjIGzSpcuEh5Y+J
PXFcMPKL5wYiXYoXn7uQ3zvuM6YpkYpQOuTqnMGuh2/xCPBbbDENOcCBIPHQF23j
gXO4aBnBrw==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:53 2024 by rpki-client on console-fra.rpki-client.org