Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
File: hfTuFPbTinzwcSed_3s5FwLjcTU.cer (raw, json)
Hash identifier: UeSZgPDOnoWMOgT6IuHFHaDl70jc50ClAKV5+A6JtT4=
Subject key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB30358E51D747FC90C2564BD301B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.146.224.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:35:8e:51:d7:47:fc:90:c2:56:4b:d3:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:01:17:2a:01:02:89:aa:b6:85:9a:9b:13:
f6:9e:7c:41:1e:12:c8:87:ea:a9:20:a8:8c:18:3b:
67:65:97:ae:d4:69:31:e0:e7:25:53:44:fc:38:6d:
fe:26:e0:39:6e:e4:e5:aa:e3:63:05:fa:f2:e0:cf:
35:45:67:d7:e3:5d:85:80:44:4e:ac:c9:23:64:f9:
de:51:f6:67:b5:bb:8d:22:7a:82:06:80:c8:e7:35:
2c:62:d1:e8:e9:f1:a2:3a:fa:16:7a:b0:2a:16:a2:
31:99:2d:86:cc:0a:af:09:f4:1b:4d:81:80:5a:e3:
9f:fa:59:c4:85:55:13:8c:c5:51:3e:cf:a3:20:b9:
ed:08:cb:42:0b:6b:62:a3:15:6b:8c:b0:e4:1c:9a:
4e:f9:1a:48:2e:99:59:2d:96:a7:28:8a:75:6b:20:
de:0b:ad:81:6f:f0:00:d9:d4:fe:71:37:c4:5b:c7:
40:af:c5:35:8b:c8:e9:39:d6:b6:ad:a1:99:ef:4f:
1b:b9:16:07:06:54:a2:52:ab:09:bf:33:7e:da:7a:
2b:3b:38:e1:c6:d2:78:75:2b:98:75:fb:55:8a:d8:
96:16:9e:72:ae:21:84:3b:21:72:06:49:9a:7c:75:
2c:67:f8:96:15:92:fc:f2:38:0d:68:be:14:c9:20:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.224.0/22
Signature Algorithm: sha256WithRSAEncryption
40:8b:5f:b0:22:ef:bf:41:fa:ef:b5:d8:ee:72:53:f9:7a:d2:
9c:a0:68:11:b4:fd:5d:1e:1c:cc:be:b6:93:8d:ce:c8:07:3e:
bf:7a:85:c9:cd:0d:a3:8c:71:cb:87:2d:fe:9e:ca:74:11:0b:
4e:51:cf:f7:93:68:b6:9d:3b:02:45:03:70:27:44:d6:81:ea:
1f:ba:fd:ae:8b:91:e9:5a:15:7d:0d:fe:a4:cd:8d:c3:ff:51:
00:c1:b3:c4:7f:ed:e7:39:95:95:cb:5b:82:2b:ed:03:4e:ea:
87:7e:94:df:ab:11:81:57:9b:62:6b:3a:27:5f:82:0e:42:b8:
e6:bb:09:59:0c:75:2b:a4:89:68:33:7a:61:3e:76:d9:53:b7:
1b:16:ad:36:f3:43:96:7b:45:69:53:2a:af:ff:af:59:7c:07:
89:37:a9:7d:ff:73:69:73:a8:ec:df:1c:a6:15:ea:06:19:34:
77:80:78:32:ed:79:74:d8:43:68:2c:b3:12:dd:d7:59:a4:9d:
95:a8:e6:a1:55:fb:fa:9a:18:15:54:8f:75:20:e7:19:cb:37:
c4:5c:71:02:19:7a:b7:de:24:26:14:7f:71:78:9f:8e:7b:a8:
db:c7:52:78:d9:93:d2:a4:71:6a:92:c9:d4:14:a5:b7:6f:8a:
0a:5c:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:43 2024 by rpki-client on console-ams.rpki-client.org