Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
File: hcNSXWi2ERZWThbh3U5WywNcnIU.cer (raw, json)
Hash identifier: vY+uYvAk6FE2jq8kUf8xk5dcu1PGmVRzwH9WLRJLSCE=
Subject key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E51A06A30ABF42CCF43F06825E1B7EB1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Mar 2024 12:54:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204119
IP: 84.38.64.0/21
IP: 84.38.76.0/22
IP: 2a00:5080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:a0:6a:30:ab:f4:2c:cf:43:f0:68:25:e1:b7:eb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 12:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:9c:df:7d:9f:69:1c:cb:f6:1d:eb:a8:4e:
45:79:a6:fc:45:b9:fd:8d:c4:39:58:78:46:b7:42:
7b:e0:ed:b0:45:99:44:d8:9d:4c:72:18:ff:f8:52:
c6:f3:2f:93:4e:1f:84:60:4d:40:4e:9d:73:1e:28:
d2:09:30:f9:58:29:f6:f9:12:cd:c0:61:5c:9e:39:
fc:97:0b:d2:a0:fb:bb:4a:68:39:31:b5:a4:da:2d:
82:47:ee:86:08:6c:89:33:15:91:a6:ab:77:a9:38:
2d:14:3e:d7:c9:be:1e:f7:62:5e:48:c9:46:73:29:
92:ec:77:5c:ab:52:31:a3:d4:6d:8a:aa:2f:b1:be:
02:eb:ae:63:28:22:8a:36:49:9f:ca:20:cd:a1:1d:
32:12:86:96:ad:7a:85:0a:ed:4e:ff:8b:e0:5f:49:
9b:40:02:dc:6f:3a:a4:df:b9:66:7c:bf:77:f1:cd:
f3:3b:aa:82:20:62:e9:0a:f4:8b:1e:56:9d:d1:7f:
9a:a0:d8:f3:9e:65:b2:27:02:d3:ca:fa:59:a7:84:
14:09:8b:09:7c:aa:54:70:99:2d:d3:41:a4:a6:9c:
a9:5e:0f:74:bc:de:d8:a8:f6:4e:de:0b:31:a0:9b:
35:2e:c7:af:1a:37:f0:0f:f9:73:9d:d3:e5:bb:6d:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.64.0/21
84.38.76.0/22
IPv6:
2a00:5080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204119
Signature Algorithm: sha256WithRSAEncryption
47:41:b0:b1:c3:4c:90:a3:1d:d9:70:e9:7f:4c:97:b0:8c:a9:
da:5c:3d:38:b4:e3:38:dc:ea:48:ca:e3:d2:87:1a:3d:66:2f:
ce:a6:2c:52:70:4a:e3:55:08:e2:68:cf:31:e8:76:0d:b7:b7:
6e:e8:d5:8d:48:30:29:f2:e2:bf:7c:85:3d:8d:df:0f:4d:af:
e1:e5:5e:a6:94:cf:70:6f:f1:ee:29:cd:89:4c:ce:56:92:73:
1f:eb:fc:6b:02:3e:8e:94:1c:11:11:63:9b:58:3d:38:c4:0c:
40:47:60:96:63:f7:37:0a:4d:6a:1a:9e:f7:e1:bb:93:35:00:
c6:45:d6:9d:4d:b4:01:9f:ed:73:14:1b:77:75:25:5c:e8:df:
5c:dd:62:2b:0b:df:41:f6:82:0b:c1:30:13:f3:3a:c8:c8:62:
22:7f:71:9e:76:ca:b3:0b:c5:05:9b:68:e1:f5:4b:b1:74:ec:
dd:f7:08:e8:12:6f:67:24:68:bb:75:ef:dd:b0:ec:07:76:d4:
2d:06:56:f6:e1:70:80:02:7c:b9:67:d6:b2:cf:10:af:ec:5d:
06:ea:5c:ea:28:60:26:4a:c5:f4:3a:32:c2:a1:c4:b0:85:ea:
d4:cd:94:c1:d6:4e:93:a9:37:f7:d0:a2:8a:37:7e:bd:34:2c:
e0:d5:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:10 2024 by rpki-client on console-ams.rpki-client.org