Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer (raw, json)
Hash identifier: vDQFkxVLRpTCI3A7yyR63lVn8KQUIGeSK+U8jVHHZw8=
Subject key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DE4C0B681D532F5B7DA292744B33A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208855
IP: 109.71.152.0/22
IP: 2a0f:58c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e4:c0:b6:81:d5:32:f5:b7:da:29:27:44:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:cb:dd:0e:12:1b:19:63:be:01:ef:a4:1b:
98:c0:a7:55:58:72:bf:2e:06:48:9c:b7:c7:e1:cc:
ff:37:b1:b8:01:e3:ee:48:32:87:9e:dc:a8:bf:c5:
37:81:b7:9b:57:11:36:a6:59:8e:ce:9a:00:24:26:
31:69:84:70:b9:f9:56:f9:a2:4c:a9:38:b5:83:20:
8b:b3:93:eb:f3:df:7c:3c:02:25:9d:dd:fd:62:02:
42:38:fb:10:5e:46:52:d5:4e:6a:36:46:23:12:c4:
e8:62:c1:77:9e:40:e6:1f:07:86:41:03:20:48:92:
8a:77:26:2b:f1:39:db:3b:8e:18:c7:33:c4:30:f3:
66:e3:05:58:10:fb:c9:35:4e:2f:ed:b9:a2:93:55:
3f:8a:b2:2f:53:ba:30:27:6d:a4:c9:dc:6b:e2:45:
a5:a6:8b:d5:a5:33:49:87:c8:40:3a:70:ce:7b:0c:
a6:e2:6c:d1:3b:a7:e9:c4:5d:a8:5a:8d:37:cc:69:
1f:cb:3d:e0:bd:a9:f3:87:e8:6e:55:e2:2f:7a:da:
5b:89:d1:39:ad:ed:79:b9:39:61:b0:72:0a:71:01:
bf:47:99:0b:e3:2f:13:8f:45:b7:5e:03:76:50:82:
34:c4:66:01:a5:be:b3:ef:73:6a:3f:e1:18:bc:e9:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.152.0/22
IPv6:
2a0f:58c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208855
Signature Algorithm: sha256WithRSAEncryption
4f:d6:be:8d:d1:62:f8:24:97:d0:d2:d6:80:7b:f2:8a:b7:c5:
99:22:ef:09:55:2a:d4:0d:24:64:87:f0:1d:88:d1:38:0c:55:
2a:e2:65:15:bc:db:22:71:0a:63:2e:07:fe:0d:e5:ff:b4:31:
2e:20:6f:b2:d8:c3:87:a0:c5:07:8d:94:8e:cb:8c:fb:37:02:
db:a0:8d:5a:0e:10:13:d6:3b:57:bc:91:95:37:8f:67:ad:aa:
73:c3:d3:df:d3:6a:c7:96:34:8c:b3:55:c9:8a:1c:47:91:a2:
37:24:8b:c8:41:e4:e1:4c:8c:66:38:f7:0e:77:ff:42:22:e6:
e7:8b:d5:75:36:22:e0:f8:c9:41:86:43:2a:c4:19:6d:e8:f0:
dd:03:e1:bb:0b:28:83:f2:c1:a2:b1:e3:d0:cf:5b:81:f8:2f:
6c:a8:46:77:5f:8d:0e:f7:df:46:fe:52:2b:9c:51:df:88:65:
c9:d1:af:29:50:be:f3:a7:7d:7f:27:68:c1:88:1a:32:9a:a9:
e3:e9:8b:8a:d5:dc:80:c6:ad:78:53:ce:24:1f:fd:55:1b:aa:
79:08:34:da:27:55:80:68:7e:68:df:5c:e3:8e:17:b7:b3:e7:
87:0a:47:23:b9:19:c7:3a:02:d6:b3:42:38:43:a0:da:c1:68:
4a:8b:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:29:25 2024 by rpki-client on console-fra.rpki-client.org