Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.cer (raw, json)
Hash identifier: Uzq/kZwyRxSZMxrtEa1rmFte7i2na/2YYDBygi6g3Zs=
Subject key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC93122D78931C64C6D58060D67F96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59588
IP: 45.153.116.0/22
IP: 151.236.160.0/19
IP: 198.160.164.0 -- 198.160.169.255
IP: 198.176.116.0/23
IP: 2a10:2200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:93:12:2d:78:93:1c:64:c6:d5:80:60:d6:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:72:4d:d8:57:98:66:e8:4f:4e:62:0a:10:
44:a2:30:e2:eb:48:21:ea:92:d5:ae:8a:61:e2:17:
c0:d9:80:4f:0b:de:92:ec:64:31:04:09:52:2a:ca:
b3:28:44:7a:03:2f:18:c7:b3:39:3f:fa:a6:66:ab:
3b:1e:e0:06:cc:49:5f:3c:52:b0:7d:a7:08:6c:c9:
b2:6e:78:d9:bf:dc:39:de:6f:9c:96:5a:18:56:63:
42:3a:b8:04:a0:31:e4:4c:dc:96:b2:e2:04:3e:6e:
f2:c1:19:dd:13:5f:b2:3e:0f:dc:fe:47:6d:da:a0:
93:c5:e4:60:34:5a:0b:c9:04:cc:ba:fc:1f:72:1b:
65:90:4a:85:b7:e3:5d:63:68:b6:d1:2b:61:28:09:
78:ba:e7:f6:46:6e:c9:6a:53:57:a9:e2:7e:7b:9c:
e0:d2:0b:87:5f:1d:a8:66:56:97:18:8a:01:d8:20:
5d:80:92:a6:c7:f6:58:60:b2:a2:d7:d4:18:78:5f:
be:46:da:3e:5a:04:4f:0d:1a:66:01:fb:cf:74:e2:
01:90:19:36:c7:33:df:93:36:ee:f8:ad:ed:49:1d:
a9:09:1a:52:f8:a0:b9:a1:43:73:96:68:ee:51:da:
de:2f:71:8e:52:9b:86:f2:0e:fc:4a:2c:b5:3b:bc:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0/19
198.160.164.0-198.160.169.255
198.176.116.0/23
IPv6:
2a10:2200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59588
Signature Algorithm: sha256WithRSAEncryption
62:2a:c0:70:68:e1:8c:e3:cd:24:18:26:3f:81:94:34:97:b4:
f5:f1:f5:31:53:fa:6b:0c:d4:2d:91:fc:7b:f2:08:f4:3d:a9:
ff:88:66:6b:d5:85:e2:d4:7f:fd:69:c4:6b:b1:e1:11:44:a6:
6e:18:d4:98:cf:28:ce:b9:31:59:96:25:b2:d3:0c:8b:ce:b7:
e7:e1:d9:55:7f:c9:22:d7:54:24:1f:ea:dd:25:57:57:f2:88:
af:62:6a:86:34:35:a6:ec:d6:2e:b8:c3:de:cd:d8:11:c2:05:
0a:5f:46:81:2a:1d:f1:6f:19:fd:4a:01:55:45:c5:1e:da:71:
38:09:48:9f:65:fb:6b:39:49:f4:a8:d0:d9:c3:db:1c:82:75:
a9:15:9e:ec:d3:53:f0:49:5b:de:1f:2c:2a:47:88:dd:90:00:
2e:86:f7:0b:58:ef:ed:d1:72:bb:99:31:63:7b:01:05:48:b6:
22:88:9d:d3:bb:4d:9e:13:ef:33:37:68:86:cc:cb:31:4a:f2:
ee:50:95:77:5b:75:8d:bd:6c:ff:fb:21:f5:68:8f:4a:16:f7:
d1:ca:35:c6:7b:83:aa:34:a1:55:a8:a1:20:14:a0:01:f9:86:
ee:8f:df:f7:08:ad:47:bb:17:47:ba:96:75:3c:91:ce:bb:83:
68:b8:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:00:20 2024 by rpki-client on console-ams.rpki-client.org