Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer (raw, json)
Hash identifier: 3wyF52A8R4xjzvBdz9fiJB/SFuMpri1oUiUIyG1dDR8=
Subject key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5B03AF1DCD60E434F080D9A9C9C006CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Mar 2024 08:39:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31472
IP: 37.157.48.0/21
IP: 84.247.32.0/22
IP: 89.35.164.0/22
IP: 149.19.176.0/22
IP: 185.2.76.0/22
IP: 185.34.80.0/22
IP: 185.60.4.0/22
IP: 185.61.88.0/22
IP: 185.86.20.0/22
IP: 185.91.40.0/22
IP: 195.206.184.0/21
IP: 2a00:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:03:af:1d:cd:60:e4:34:f0:80:d9:a9:c9:c0:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 08:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2875f185823dbc6a82d105b3ca16077db5729377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:47:26:9a:89:3f:60:59:ea:90:35:2e:3c:
36:bc:1b:55:6b:8c:cf:c3:cc:c7:4b:a2:f8:c5:31:
ab:f0:07:16:fe:ac:66:a2:5a:3b:8e:bb:67:3c:ef:
b1:31:6c:67:f2:e6:ad:d7:98:d6:c4:ac:b1:ed:73:
55:01:df:12:52:32:12:c3:ec:8b:8d:98:aa:ee:91:
60:47:b3:42:8a:4d:26:5b:23:76:ce:fb:71:c5:7e:
78:aa:d7:90:50:72:b3:51:b7:7e:f6:12:e5:9c:d4:
71:ff:42:a8:43:aa:92:8f:cf:f4:63:60:13:2a:58:
88:e9:a5:af:cb:05:34:c2:13:d6:0b:04:14:de:4d:
ad:04:8a:ee:06:1a:0e:59:69:98:c6:00:d2:c9:05:
66:52:7c:a0:d3:b4:db:e7:b4:6c:a4:20:1a:2d:96:
ff:80:da:78:4b:9a:ac:c3:82:d1:1d:56:18:33:fa:
44:c1:21:85:8b:ff:21:d6:19:f0:f0:00:20:88:9c:
36:ba:29:0d:1f:34:3f:f3:79:08:de:98:d6:61:4d:
44:6f:d7:37:94:57:31:8f:95:fa:48:44:a1:8c:0f:
40:3c:fa:ce:31:00:40:5f:c0:d7:b7:e9:a7:fa:85:
3e:12:61:1a:65:ed:03:09:cc:97:51:5f:93:d6:7c:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
84.247.32.0/22
89.35.164.0/22
149.19.176.0/22
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31472
Signature Algorithm: sha256WithRSAEncryption
14:2c:95:85:6e:04:a0:b7:ff:57:b8:dc:2b:10:93:13:0c:ea:
96:04:25:56:fa:f2:ee:ee:d5:44:ba:a0:ef:ab:25:ec:5b:76:
e1:23:f4:9c:7b:05:90:d9:3f:5f:24:51:73:2e:a2:75:0e:cf:
44:78:32:b2:6c:3a:e8:27:41:b8:ad:de:d1:ab:f2:0b:40:10:
df:a4:a2:15:8a:2a:fd:67:3c:8e:36:2c:33:1f:ab:a4:d7:c1:
d5:9f:4a:cc:7e:c7:15:1e:e9:ea:24:17:e3:7c:3c:d9:b5:fd:
8e:f0:50:e6:c5:56:93:52:aa:3a:76:d8:8c:d3:54:38:e8:b9:
3c:20:61:53:f0:26:06:89:12:1e:c2:ca:ec:c2:b7:37:87:26:
f9:c8:4a:b3:4b:87:56:a1:25:a4:e7:81:49:bc:fe:f3:da:0e:
46:ca:35:1b:b3:57:02:59:43:1a:11:59:64:38:79:5f:d7:9a:
fd:ea:b7:e0:2d:ba:88:df:92:12:09:e8:93:72:a2:93:0a:f3:
4a:75:69:ab:4c:38:36:3b:96:3f:c4:e0:dd:87:ca:d2:ec:52:
dc:53:e3:02:a6:b6:3c:6c:fa:13:d8:06:b9:29:9f:22:e5:8c:
68:ec:75:11:f3:8a:50:06:77:0d:90:58:32:49:14:d7:d5:3a:
0d:61:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:22 2024 by rpki-client on console-ams.rpki-client.org