Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
File: hkl2gukwfEaHk1AIFzFH0TKijGQ.cer (raw, json)
Hash identifier: WZ1jXiPVom1khqq+hLKiAfIL1Sweh0TH/2SFIXxC4DI=
Subject key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802112FC6D989920998A4BC6F049759
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60782
IP: 79.139.66.0/24
IP: 79.139.68.0/22
IP: 79.139.116.0/22
IP: 185.74.84.0/22
IP: 185.97.16.0/22
IP: 2a05:4900::/29
IP: 2a06:3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:11:2f:c6:d9:89:92:09:98:a4:bc:6f:04:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86497682e9307c4687935008173147d132a28c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:27:c2:5a:4a:c7:10:71:b4:62:4b:82:66:
3c:85:95:45:dc:21:8a:92:df:0b:f8:b4:96:ac:59:
f5:4d:1e:d6:71:8c:ba:b1:09:2c:8b:e5:c7:77:86:
0c:a7:73:55:3a:4d:21:c5:f8:27:03:de:ba:82:6b:
70:ce:14:ad:c0:18:56:3d:67:f5:55:f7:7c:94:05:
4e:de:b8:4f:72:be:b0:88:62:6d:5d:72:50:58:28:
00:0f:c1:d2:df:56:be:35:cd:f3:70:49:14:90:60:
44:0c:e0:cd:aa:96:69:86:fe:b5:2e:1d:74:61:2f:
30:dd:96:c5:64:0c:eb:7f:11:c9:d3:78:f1:cc:01:
60:35:58:88:95:e4:f9:4b:a1:10:6e:de:2e:2e:86:
53:95:16:6e:5d:34:b8:3b:1f:62:36:b3:72:cc:aa:
93:15:28:13:69:f1:19:70:a1:7a:21:c3:c9:9b:62:
ec:14:2a:ee:46:6f:c2:ca:ae:89:48:9a:1a:1f:3b:
2d:03:9e:3b:0a:38:de:f0:a6:a2:03:dc:a7:3b:18:
a3:6f:79:18:d6:0f:a6:f3:87:08:a9:84:1e:9a:b4:
af:36:58:14:53:0d:a8:79:a6:a0:48:3a:14:fe:2d:
24:b6:ae:3e:fa:ea:11:66:92:26:2e:70:dd:da:5e:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.66.0/24
79.139.68.0/22
79.139.116.0/22
185.74.84.0/22
185.97.16.0/22
IPv6:
2a05:4900::/29
2a06:3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60782
Signature Algorithm: sha256WithRSAEncryption
70:1b:dc:c0:b6:40:ee:4e:bd:d8:96:c9:c6:c5:87:84:41:77:
22:29:e0:17:3e:36:4c:01:18:e9:13:93:1b:fb:1c:c4:ea:06:
4a:30:2c:d6:f0:6f:f0:d4:74:9d:d8:6c:14:c4:0f:3a:6f:42:
1e:8b:20:e0:24:f9:77:9b:b9:64:23:97:5d:5a:d7:da:c2:19:
3c:19:db:46:06:a8:e4:71:70:32:5f:5a:b7:e6:62:cd:b7:10:
67:4f:a0:8f:c3:bf:6e:81:a0:f4:85:40:5f:36:1b:ab:1b:77:
9d:06:ff:f2:91:bf:66:25:b3:c8:ce:cc:31:de:cc:3d:1c:b1:
8a:7b:5e:31:72:d8:48:ec:8d:9b:3e:0a:da:73:a8:d1:cf:f4:
6f:3d:1c:9c:a7:bf:cc:7f:24:c8:9d:eb:3c:74:4a:cf:cf:a5:
70:72:39:a4:8b:79:eb:c5:ee:4b:83:4a:59:19:03:f6:12:7a:
ce:34:78:de:a4:81:ee:a2:78:ae:48:3a:8c:7a:4c:9b:b7:80:
66:b2:a5:0a:59:b9:b6:00:a9:13:9e:21:b5:6e:db:33:6f:38:
41:bd:fc:94:67:cc:a8:41:2f:c5:8e:62:f9:2f:e1:ff:fa:cd:
12:5f:7b:f7:e3:7d:52:cc:d2:87:c3:f5:1a:f7:3f:43:f2:54:
9e:f2:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:08 2024 by rpki-client on console-ams.rpki-client.org