Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.cer (raw, json)
Hash identifier: JxapDJ5G6bVa+RHhpVZPPFQiH0aU252BWmsfjz9F1ac=
Subject key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCEA6F47DE75A95AF6123FDABB7042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29124
AS: 30784
IP: 46.31.24.0/21
IP: 46.39.224.0/19
IP: 62.182.72.0/21
IP: 79.172.64.0/18
IP: 81.200.0.0/19
IP: 82.199.96.0/19
IP: 84.51.64.0/18
IP: 90.155.128.0/17
IP: 91.123.16.0/20
IP: 91.189.240.0/21
IP: 91.207.170.0/23
IP: 94.102.112.0/20
IP: 95.143.208.0/20
IP: 109.225.192.0/18
IP: 109.229.128.0/19
IP: 134.0.96.0/20
IP: 176.97.128.0/21
IP: 185.55.0.0/22
IP: 185.60.44.0/22
IP: 188.68.96.0/19
IP: 195.234.56.0/24
IP: 213.193.0.0/19
IP: 2a02:2620::/32
IP: 2a02:42e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ea:6f:47:de:75:a9:5a:f6:12:3f:da:bb:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:30:25:aa:f7:ca:d9:bf:1b:98:ea:74:6f:
e6:1e:99:a8:2e:5d:3d:bd:48:83:11:01:d1:8e:9b:
25:0b:61:ca:22:02:df:47:0d:f6:8a:5b:f8:6d:a2:
5c:6c:ee:24:9b:cd:f5:ad:51:12:86:00:5d:b9:36:
3d:b7:b3:aa:08:91:05:57:fc:99:40:bc:82:e2:5a:
ad:75:ca:a6:b8:d4:35:0b:8e:a4:89:24:2c:a8:18:
bb:30:f8:57:00:4b:6e:39:3a:0e:22:08:64:e3:e7:
54:e2:2e:0e:6f:0e:7c:80:21:d4:0a:d8:f2:a2:eb:
d0:20:f0:6b:46:aa:38:e3:46:60:6e:3c:4f:ea:1d:
6d:45:fc:e5:26:63:d0:0d:0b:15:ca:b3:ca:3d:f8:
d6:7f:55:07:19:94:08:9f:e9:6c:1c:5f:bf:f2:27:
c7:b5:c3:0a:8e:30:1e:15:f7:2d:f5:f0:4d:c1:e0:
fe:2d:04:7f:40:d4:5d:41:a2:f7:52:37:b5:5b:89:
28:cd:6e:2c:4f:ba:87:69:f4:c2:15:58:1b:35:f9:
13:d6:e0:e4:6b:c5:ee:9f:18:97:58:3d:73:11:bc:
10:11:81:2d:33:fa:9c:dc:2f:76:4b:a4:c2:5e:e8:
69:97:4b:be:1e:80:66:4d:ad:a2:31:4b:74:dd:e9:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.24.0/21
46.39.224.0/19
62.182.72.0/21
79.172.64.0/18
81.200.0.0/19
82.199.96.0/19
84.51.64.0/18
90.155.128.0/17
91.123.16.0/20
91.189.240.0/21
91.207.170.0/23
94.102.112.0/20
95.143.208.0/20
109.225.192.0/18
109.229.128.0/19
134.0.96.0/20
176.97.128.0/21
185.55.0.0/22
185.60.44.0/22
188.68.96.0/19
195.234.56.0/24
213.193.0.0/19
IPv6:
2a02:2620::/32
2a02:42e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29124
30784
Signature Algorithm: sha256WithRSAEncryption
98:bc:3d:53:4d:fd:c8:29:1d:48:7a:3c:90:5b:a9:be:47:4a:
7f:c8:5c:1d:f6:c0:19:43:e9:09:60:7d:8e:72:88:43:e8:29:
b0:8a:90:de:96:29:75:d9:cb:50:1c:2c:2e:e0:23:75:fb:e0:
31:2e:c2:88:f5:19:6f:d3:f7:29:21:54:3e:c0:81:28:43:c4:
81:8a:b3:41:7d:df:f8:0d:d9:95:72:59:85:a2:0f:bf:82:dd:
f9:51:9a:1d:9b:6a:0e:b6:99:54:39:43:ef:90:23:d6:4e:c0:
26:78:16:e9:1c:e9:73:65:1a:f2:29:e6:74:62:fe:bd:8d:e6:
58:d6:e8:86:12:c3:dc:1e:6d:12:70:2d:a6:08:7e:89:e1:db:
d7:91:25:3b:c6:16:f0:0a:48:5d:9d:66:5c:b0:c0:45:1a:f5:
91:28:5b:fb:74:80:8c:0f:92:82:a7:23:5b:3c:1a:42:54:a8:
12:ca:79:e6:17:65:a7:91:26:09:08:44:8e:21:df:5d:c8:70:
64:e1:0d:8a:d3:d6:47:9f:4d:30:8e:ea:48:42:2b:14:25:90:
ba:22:da:07:e5:b9:2d:79:28:9b:75:84:01:29:5e:e6:0a:ab:
32:bb:7d:9d:66:96:81:90:7a:7b:c4:0c:77:8a:c4:c2:a9:86:
f7:63:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:32:51 2024 by rpki-client on console-ams.rpki-client.org