Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.cer (raw, json)
Hash identifier: W0ocK2GlunrakmVm89C+358YDsREhxGmuHWh9fG4cA0=
Subject key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192720F9A2B642BC958BEBB3E79106FFB95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Oct 2024 16:14:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44366
IP: 92.43.40.0/21
IP: 2a00:f4e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:0f:9a:2b:64:2b:c9:58:be:bb:3e:79:10:6f:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 16:14:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:59:4d:09:6b:68:30:ae:5b:eb:72:e6:16:
8d:a9:40:d7:ad:96:1c:06:a6:f6:e7:2f:ca:cf:c4:
eb:8a:7e:6a:e7:5f:f8:53:aa:68:6e:98:02:ee:e7:
a9:20:ec:53:44:38:b0:15:18:9a:c0:3f:e8:48:20:
1b:05:db:44:af:bf:6a:3a:cf:ed:c8:89:e5:6f:ae:
e7:db:d2:48:a6:45:f2:99:71:5a:ec:67:33:1a:a2:
29:0f:c4:4a:ae:60:0f:6d:6a:1e:f6:62:19:d8:a6:
42:db:7d:48:d1:3d:0c:03:27:2c:d7:82:fd:b4:2d:
c7:4e:78:7c:87:d4:58:0f:d6:5c:b3:19:b5:23:75:
2f:9b:bd:7e:47:a9:f1:00:17:b1:c5:2f:81:ca:fb:
48:6a:b1:43:b0:38:d4:c3:2f:2e:34:78:9a:d7:ce:
09:f2:6c:2d:b0:68:94:56:7a:40:26:11:fa:b2:0b:
df:48:37:66:c8:5a:f5:85:2a:f3:95:50:35:90:61:
d9:3c:4f:36:e4:25:34:d6:f3:bd:b6:87:4c:ed:61:
e7:77:b9:88:2d:e3:31:b3:e7:05:4a:79:4d:f7:75:
de:f8:47:37:48:6c:b1:fd:5d:c7:ba:cd:1e:0e:8d:
b7:e8:4b:db:60:d6:60:c8:36:70:54:8d:2c:fc:c6:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.40.0/21
IPv6:
2a00:f4e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44366
Signature Algorithm: sha256WithRSAEncryption
7a:82:59:1a:8c:a6:b8:4d:0f:3a:52:b9:3d:72:ed:ef:5e:8c:
89:e2:12:13:26:c8:86:5c:68:98:0e:23:d9:90:a8:db:c8:18:
8c:ef:d5:0e:a1:94:be:31:4d:36:12:b0:5d:c3:32:8c:a3:7e:
1d:df:61:2d:ae:e9:94:d3:bc:1a:3a:f7:07:3e:e2:84:54:1f:
81:b0:4e:25:4f:81:bf:09:af:1a:61:d1:cc:7e:5d:61:05:7c:
55:50:42:74:44:4e:b0:b1:52:7c:14:d0:88:5f:9f:35:f0:24:
06:ac:6e:9a:5a:8f:e8:3b:19:23:3b:30:80:bd:15:f2:17:bf:
28:8f:1b:f5:19:11:38:86:94:3e:28:94:84:63:8a:65:24:93:
12:7d:d1:8b:22:a4:ae:01:5e:6f:1c:2c:35:10:40:69:a5:a2:
88:67:59:f9:29:8d:de:42:9e:68:f9:cd:24:9b:2a:23:2d:2d:
bb:78:06:60:e1:cd:16:20:27:8a:c7:12:1d:0a:c3:91:11:a4:
a5:21:38:82:18:47:46:06:1a:20:50:40:90:73:64:52:41:e3:
39:51:bb:43:c2:ac:7b:9d:20:3f:1c:0f:88:86:3f:e1:4a:c1:
1d:b6:36:bc:5e:c8:47:ec:a6:19:ea:46:dd:7f:2c:92:ad:43:
84:d3:85:ff
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZJyD5orZCvJWL67PnkQb/uVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDA5MTYxNDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzE1YzdjYzdiNTQyNGRhNWEyMTExNmZlZjcyY2U1Y2Q1NjRjMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYpZTQlraDCuW+ty5haNqUDXrZYc
Bqb25y/Kz8Trin5q51/4U6pobpgC7uepIOxTRDiwFRiawD/oSCAbBdtEr79qOs/t
yInlb67n29JIpkXymXFa7GczGqIpD8RKrmAPbWoe9mIZ2KZC231I0T0MAycs14L9
tC3HTnh8h9RYD9Zcsxm1I3Uvm71+R6nxABexxS+ByvtIarFDsDjUwy8uNHia184J
8mwtsGiUVnpAJhH6sgvfSDdmyFr1hSrzlVA1kGHZPE825CU01vO9todM7WHnd7mI
LeMxs+cFSnlN93Xe+Ec3SGyx/V3Hus0eDo236EvbYNZgyDZwVI0s/MbDOQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBcVx8x7VCTaWiERb+9yzlzVZMDxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4Lzc2MDFj
YS1kZTAwLTRlZTMtOTlmZi1jNTM2YmY3Mzk4NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNzYwMWNh
LWRlMDAtNGVlMy05OWZmLWM1MzZiZjczOTg2OS8xL0Z4WEh6SHRVSk5wYUlSRnY3
M0xPWE5Wa3dQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXCsoMA0EAgACMAcDBQAqAPTgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCtTjANBgkqhkiG9w0BAQsFAAOCAQEAeoJZGoymuE0P
OlK5PXLt716MieISEybIhlxomA4j2ZCo28gYjO/VDqGUvjFNNhKwXcMyjKN+Hd9h
La7plNO8Gjr3Bz7ihFQfgbBOJU+BvwmvGmHRzH5dYQV8VVBCdEROsLFSfBTQiF+f
NfAkBqxumlqP6DsZIzswgL0V8he/KI8b9RkROIaUPiiUhGOKZSSTEn3RiyKkrgFe
bxwsNRBAaaWiiGdZ+SmN3kKeaPnNJJsqIy0tu3gGYOHNFiAniscSHQrDkRGkpSE4
ghhHRgYaIFBAkHNkUkHjOVG7Q8Kse50gPxwPiIY/4UrBHbY2vF7IR+ymGepG3X8s
kq1DhNOF/w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:26:11 2024 by rpki-client on console-ams.rpki-client.org