Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.cer (raw, json)
Hash identifier: xP97C+yK/9U0VCMF4SFKj3lpK5RzGyUZLRgr10v/sBo=
Subject key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276D470B24134E99E54219715BF13C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207290
IP: 37.44.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:47:0b:24:13:4e:99:e5:42:19:71:5b:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:6d:77:88:e2:c4:f2:dc:8f:15:c0:aa:42:
6f:bc:cd:9d:d3:3c:e1:62:50:83:d6:61:e0:72:ef:
0f:c2:91:fd:68:25:43:1d:ec:17:61:ee:08:97:f4:
ee:45:2f:01:61:39:0e:f6:bf:e4:95:ad:7b:5f:67:
45:26:f2:3e:53:03:db:fc:40:11:bf:07:62:45:a9:
bb:43:f4:bd:bc:3d:d9:72:d0:fa:42:23:18:a1:61:
4a:84:18:fc:9e:2e:c2:7d:59:10:75:99:a3:af:10:
e4:d8:50:71:e5:5d:e9:04:77:73:33:ee:5c:6d:f0:
a6:33:36:53:cf:ff:79:6e:70:dd:c6:2b:b5:f5:9c:
59:23:36:ff:32:ed:c3:5e:3a:d7:4d:d9:08:56:f7:
2d:ad:d7:ef:8e:aa:96:0d:3d:22:61:bc:b7:a4:03:
bf:6c:94:82:3a:b2:20:9f:6b:5e:ae:e4:9d:d8:68:
13:a5:a3:9f:b3:45:08:3e:21:22:5d:a3:e4:70:74:
a6:54:2e:e2:3f:15:b1:c1:53:d7:c2:fe:ea:e1:74:
83:4b:3a:c9:5f:18:3d:6b:fa:1d:b4:f7:42:4e:7d:
cb:11:12:66:f2:a8:24:ac:b5:7d:1e:83:7b:ac:31:
6b:3c:94:62:c3:74:91:ef:5d:4d:b4:cd:63:1c:f7:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207290
Signature Algorithm: sha256WithRSAEncryption
4a:75:88:5b:ee:dc:e3:4f:48:76:b8:93:c0:79:06:ac:9e:3b:
50:51:cd:9a:46:d1:c5:22:77:1f:7e:53:e1:f6:77:e5:bd:2b:
d0:c8:96:ac:21:59:13:db:14:9e:a9:62:88:81:eb:54:0a:4c:
08:76:64:12:74:e1:f4:de:85:b7:03:cc:38:ce:85:34:a2:7e:
05:b4:d8:56:a7:43:e1:8a:cc:18:06:2f:35:cf:4e:ba:cd:2a:
a6:b4:cd:68:65:50:bb:19:62:70:16:77:27:00:87:d1:6c:e6:
7d:50:bf:fb:b7:45:a6:76:0e:10:0f:9a:d7:1b:ae:b0:8c:a3:
15:5c:74:b9:a9:f5:5c:0a:ed:36:63:30:1c:a9:42:1d:f2:22:
5c:a4:ba:2c:88:81:a7:86:b8:9f:68:61:7f:63:47:ce:0e:cf:
ff:0b:8e:73:0d:58:3d:4e:f8:98:ca:fc:c9:51:4d:c1:39:cb:
d3:3a:45:fb:fa:a2:83:e5:b2:64:93:cb:85:fd:7f:fd:50:ad:
b4:d3:71:0d:58:58:3e:86:53:43:69:0c:4a:d1:c7:a9:ea:f8:
d6:27:e8:74:82:6b:8d:de:a3:77:83:7b:cc:78:03:20:e6:c0:
3d:83:fc:5e:e5:98:11:ae:45:38:ed:7b:ba:8a:e2:ae:48:ea:
dc:b0:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:22 2024 by rpki-client on console-fra.rpki-client.org