Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer (raw, json)
Hash identifier: 4R1U4ZCSbWenU44x2XJJA63lhbLYordtWuMGuTR08GY=
Subject key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94ACDF257B5BBE56A10C931EAB3288A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44788
IP: 91.199.242.0/24
IP: 91.212.98.0/24
IP: 178.250.0.0/21
IP: 185.235.84.0/22
IP: 2a02:2638::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:cd:f2:57:b5:bb:e5:6a:10:c9:31:ea:b3:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:b3:6f:63:59:13:02:07:a1:7e:d5:65:25:
5f:73:ab:53:40:96:9f:60:06:9b:fa:7c:b1:41:1b:
ce:27:72:fe:3c:ba:08:fa:b7:c4:f0:df:ae:9c:1a:
2f:84:dc:fc:e0:9f:97:62:9e:09:b7:9c:d1:0b:6c:
e7:1c:09:c4:0c:3d:d0:38:7a:eb:1c:52:07:2b:f4:
d8:c5:66:47:56:43:91:83:b0:85:e7:46:40:f6:7f:
da:7f:64:eb:1b:ed:36:ac:0b:44:fd:f0:c0:30:e7:
15:a6:77:5d:b0:3b:60:ef:af:30:16:58:76:73:ba:
6a:fd:9c:7a:0f:e1:05:41:53:2e:7e:00:d2:78:eb:
37:76:46:91:8f:8e:eb:61:c1:9b:3b:2c:d6:b9:c3:
05:b3:08:b9:82:3f:20:71:59:13:0b:87:cb:6f:30:
ca:be:be:37:3c:64:fd:a3:40:e4:cc:0d:dc:3b:18:
5f:f0:a0:fc:b0:42:ea:27:b1:1a:51:ff:86:85:60:
11:72:3d:5c:d7:0b:e9:fd:b9:cb:c6:03:39:f3:51:
bc:27:23:41:53:9f:26:ea:a5:20:2b:d4:01:9c:91:
1c:57:7c:13:37:c0:06:d2:a0:19:06:29:6c:81:c2:
6f:13:81:7e:1a:f8:9e:c3:14:4f:ab:09:0e:47:0f:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/22
IPv6:
2a02:2638::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44788
Signature Algorithm: sha256WithRSAEncryption
9c:47:1a:ae:81:46:2e:ca:9b:2c:07:1d:d9:0a:e1:66:38:1f:
2d:32:63:18:42:f8:02:42:5c:f1:8d:37:98:c4:1a:ab:99:52:
b5:6b:95:f8:b7:ea:4f:d1:be:03:a3:5f:14:ea:68:da:f0:f6:
37:ab:f1:a6:a1:f1:5c:16:fd:6c:89:71:00:71:94:88:6e:86:
d4:45:a3:9a:d8:fc:bc:fe:98:ac:d4:4d:97:98:c4:c5:fd:dc:
35:50:2e:ca:f8:b6:0e:50:08:62:8d:67:fe:c5:16:6f:2e:a4:
80:f5:9e:98:ac:0c:5a:0b:62:64:80:4a:59:44:a7:00:ab:71:
e1:78:b1:47:02:c2:f6:cf:18:1c:d2:67:16:04:c3:1e:1b:f9:
38:7c:48:93:66:ab:18:ea:ea:e5:5b:48:5e:70:98:84:62:1f:
8b:ec:bc:78:5c:c4:11:37:0a:2f:32:ef:c8:28:82:05:33:4f:
44:f6:06:8f:d6:1b:54:e4:20:21:32:c9:22:73:ab:d5:54:95:
30:12:ef:f9:5f:00:4f:53:93:ad:17:83:b6:3c:5e:57:5c:f2:
e9:9b:4b:54:ce:52:03:cf:f1:bf:c3:3e:2e:f1:af:1d:cf:26:
cc:c4:2c:ae:12:2a:5c:e8:b0:80:68:e5:2f:7d:6c:de:0a:85:
b0:db:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:25 2024 by rpki-client on console-ams.rpki-client.org