Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer
File: hesz_RfSMvvmsq22bLCv4N7pA7A.cer (raw, json)
Hash identifier: Dy/styUAvLo0PZF9PyarPqBTl9HOxICddj4FHuuBphs=
Subject key identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F8060A8BDC351546D5CE63C456A3A1A28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 May 2024 07:49:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35200
IP: 176.123.62.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:60:a8:bd:c3:51:54:6d:5c:e6:3c:45:6a:3a:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 07:49:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:d4:35:dc:b9:32:b8:af:e9:ab:3e:66:19:
4c:5b:3d:b3:ba:a5:c2:6f:cf:2f:24:54:cc:6c:7b:
7a:b6:05:48:ad:9c:48:a7:f8:99:2a:d3:03:ad:3e:
cb:65:c8:c2:e1:8d:7f:b7:76:f3:ec:71:f3:a3:7f:
5d:6b:0b:92:22:bd:8f:c1:49:2c:2e:b8:28:f7:49:
ef:00:19:10:ea:ea:ed:95:e6:f5:32:a4:7d:36:71:
f4:f6:21:05:54:89:bd:da:13:a1:69:2c:f7:0a:97:
15:c7:7f:b3:89:95:68:63:33:db:7b:c1:99:11:5f:
31:3d:28:4f:24:b7:35:dc:53:12:aa:51:62:c2:01:
af:04:73:02:c3:88:d0:59:85:61:b5:21:02:76:f6:
be:94:2f:96:79:25:de:17:94:44:9e:df:2d:c2:16:
c2:0f:3c:3b:8a:e4:f8:bb:86:cc:e3:03:49:da:82:
8a:01:e7:b0:3e:1f:39:42:04:7f:c8:55:57:44:a2:
78:ec:76:03:b5:ea:39:3e:3a:da:f4:3f:01:b4:ba:
c0:e5:51:4d:61:67:02:c5:27:a9:16:be:b3:7f:bb:
59:3e:a8:af:9d:ad:a0:1c:91:ff:64:e3:c9:c3:5b:
ba:ba:0e:5a:43:8e:7a:47:07:76:c7:b2:a0:04:1d:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.62.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35200
Signature Algorithm: sha256WithRSAEncryption
66:9f:a3:be:a3:a9:32:7f:39:86:30:0e:4c:bb:bc:7a:8b:e0:
57:55:2a:c9:9f:e0:54:57:5c:01:19:c8:c5:1c:42:eb:09:8c:
ce:68:9c:3c:f0:df:b2:77:98:09:0c:ff:40:84:c0:38:7a:b4:
3b:d6:5d:0d:d4:6d:eb:af:2c:32:93:3d:e3:9c:b4:b4:2d:b2:
21:8b:62:80:1c:a8:8e:d2:e6:1f:74:ec:31:09:dc:60:ee:3c:
2b:58:04:d8:71:dd:7e:ac:c5:4f:1d:7a:73:31:eb:a3:64:b6:
e7:ed:4c:6d:78:2a:f9:54:5c:32:2b:7d:aa:67:b2:d3:21:b7:
a0:ff:9d:85:3e:d6:51:c0:c9:29:ef:d2:6b:db:ea:4d:ef:c0:
1b:71:5a:84:f3:72:3f:58:7e:d2:0b:df:05:43:89:d6:a2:4f:
34:09:f9:b8:a0:7c:34:fe:4d:f8:34:d3:1e:a5:88:3a:35:62:
47:07:73:5c:48:d1:84:38:5d:bd:64:05:a5:74:a8:6f:5a:e3:
16:b0:37:dd:bd:25:cc:cf:f0:8f:2a:7a:c3:95:29:cf:68:d4:
69:77:00:1c:3b:5e:c3:c8:5a:85:c4:c8:e8:b4:6d:41:6e:31:
19:89:34:92:bb:5f:31:58:38:51:53:9e:eb:81:ef:dc:6b:28:
d3:61:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:56 2024 by rpki-client on console-fra.rpki-client.org