Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
File: hzcmsXsBvwtUQm0YEPI9xPWPans.cer (raw, json)
Hash identifier: dfn+ZzanP8034YNcY7ABVy46xUSIU+VgHCpVUe7svwA=
Subject key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F955D19A673C6DDA98F83E9E6A3948FAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 May 2024 09:37:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49824
IP: 91.225.200.0/22
IP: 91.245.72.0/21
IP: 193.93.216.0/22
IP: 2001:678:604::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:5d:19:a6:73:c6:dd:a9:8f:83:e9:e6:a3:94:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 09:37:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:0a:c7:94:8b:b3:36:f8:ec:6b:da:f8:ed:
57:c5:ed:bc:ed:3d:f2:e6:09:a0:a8:9b:93:84:51:
a6:09:5e:da:a3:36:fc:6f:df:88:09:09:0c:8a:99:
24:d4:a8:c4:a8:7f:d1:aa:fa:49:d4:2a:69:e2:f5:
64:a2:7f:7f:46:9e:77:ce:3d:f6:b1:b4:96:2b:e5:
e7:d6:ce:b9:8f:70:d1:74:0d:4b:ae:a5:bc:be:66:
ae:76:64:d0:54:51:b0:73:b4:54:e1:9c:f8:3f:ce:
8d:2e:ad:3a:80:9a:94:68:59:24:f5:36:6e:dd:51:
e7:af:7d:53:58:ed:db:c0:dc:e6:4d:9a:65:86:c0:
65:f6:8b:ae:a0:68:4a:5d:d7:11:0a:cf:ef:1f:98:
4d:05:8e:a6:2e:a9:b4:15:a4:ff:0b:69:58:4f:7b:
a5:45:06:ae:ad:8d:fe:68:6b:c4:bd:9b:d9:02:61:
b1:81:07:05:00:1c:b9:e1:95:a3:80:29:0c:01:aa:
96:ee:de:8a:08:9a:e9:e8:dc:3b:4e:84:41:59:8e:
f0:b0:71:53:54:cf:02:39:c2:ba:e0:1f:87:aa:c7:
f7:50:81:37:94:bc:fc:fd:da:17:a3:3b:9f:bb:68:
61:7e:1d:16:d5:d0:ea:56:dd:55:f1:67:ae:b1:3f:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.200.0/22
91.245.72.0/21
193.93.216.0/22
IPv6:
2001:678:604::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49824
Signature Algorithm: sha256WithRSAEncryption
21:aa:de:41:d6:ee:e1:d4:d0:1c:da:86:3e:f5:f7:5a:0d:76:
91:9a:10:44:ab:8e:9d:b7:f8:ff:8f:05:e3:0f:d9:f6:33:cf:
57:45:44:82:7a:3c:b3:a0:73:68:64:a2:8d:82:1a:1c:87:f2:
99:9e:79:20:ad:5c:9d:c4:03:a5:de:7f:ca:71:49:ac:5f:28:
67:22:0f:80:27:d4:0e:45:65:4f:cd:f2:ef:de:07:9c:cf:65:
82:45:55:13:48:a0:c0:bc:b9:48:df:3b:da:0e:8c:de:33:d5:
a6:75:c9:e6:86:9e:54:12:cc:ac:d3:a9:3e:03:a6:8e:ac:e7:
ee:2d:4e:16:e0:5f:59:da:77:e5:dc:4e:57:70:a4:98:4a:9c:
47:e0:08:f5:91:67:68:11:28:83:df:99:b8:7a:7f:a0:95:f1:
38:50:af:3d:b6:41:4f:c1:04:38:7b:56:bd:ef:c5:8b:0e:c7:
65:cc:e0:3a:a4:80:91:ed:e0:e4:fa:97:8e:ca:99:44:60:10:
15:83:95:bf:2d:e8:d5:72:ec:8a:4c:fc:1b:ec:ca:72:6a:46:
53:1d:77:78:c1:9f:38:b0:9e:90:b5:ba:a2:f4:5b:5d:29:1d:
27:2e:63:7b:45:d1:21:f0:87:8c:94:c9:74:5a:00:b5:44:2f:
70:3a:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:23:29 2024 by rpki-client on console-fra.rpki-client.org