Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer (raw, json)
Hash identifier: vuUK48uFRNHoMyTA1bChHBIqboth7TPwmec6hYEzl2o=
Subject key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AA66CC0A1FF24B977491D5CCD2525
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29611
IP: 45.157.84.0/22
IP: 185.2.216.0/22
IP: 185.43.184.0/22
IP: 185.73.184.0/22
IP: 217.68.240.0/20
IP: 217.69.32.0/20
IP: 2a00:c20::/32
IP: 2a03:2d20::/32
IP: 2a04:95c0::/29
IP: 2a0f:5280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a6:6c:c0:a1:ff:24:b9:77:49:1d:5c:cd:25:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:3b:10:80:91:17:27:a4:a1:49:2d:39:ef:
57:e2:09:9f:e3:d8:ec:f5:f9:96:ca:c2:d9:64:2f:
a9:c7:ee:58:aa:5d:d7:29:fc:8f:4a:65:78:9b:04:
81:e3:5d:5d:83:7b:ae:7c:9e:ba:1a:27:d6:c1:38:
67:92:61:89:ee:46:25:5d:5f:9f:0c:82:13:39:18:
d1:52:12:a3:2b:1c:8b:3f:84:93:d0:f1:89:40:71:
2f:1d:52:74:a2:10:90:a2:c1:c8:d1:93:96:6c:f5:
9b:fd:eb:bb:6d:7e:73:40:6b:a6:fa:ed:af:e5:96:
0e:1d:84:21:9c:2f:7a:b9:5b:3f:7f:a5:12:30:2e:
e7:8a:65:d3:74:a9:08:b5:ff:c2:d9:1d:1b:01:ae:
ca:df:bc:df:d9:3c:bc:75:32:56:22:93:0f:87:9f:
3b:3d:69:60:b4:2f:a2:ed:f5:f5:48:2a:59:a7:dc:
7a:59:b3:89:9d:32:46:3a:90:9f:f8:32:43:22:20:
72:43:91:fb:8c:b6:2b:7b:9b:4f:3c:9c:e6:02:a4:
81:a8:f1:c0:08:f4:ee:31:15:34:ac:00:19:bf:6a:
76:df:35:7e:1f:7e:96:56:b9:8e:87:95:5f:24:8f:
b3:aa:8f:6b:56:b8:de:c4:5c:ec:23:24:94:9c:86:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.84.0/22
185.2.216.0/22
185.43.184.0/22
185.73.184.0/22
217.68.240.0/20
217.69.32.0/20
IPv6:
2a00:c20::/32
2a03:2d20::/32
2a04:95c0::/29
2a0f:5280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29611
Signature Algorithm: sha256WithRSAEncryption
63:53:97:a3:4a:5c:de:ee:6b:b9:41:12:1b:98:0d:c4:fe:0c:
89:f5:5b:ca:c8:f8:21:e0:82:da:03:49:3c:b5:e2:9f:c7:b5:
a1:91:80:d6:87:d4:67:1a:25:29:d6:36:a9:5c:a2:b7:f1:fc:
20:78:de:3d:1a:90:35:71:b5:a8:39:43:cd:22:08:04:49:77:
b3:fe:33:62:6c:a3:f8:cf:ef:16:fc:f8:9d:0c:61:f3:bc:13:
a0:0b:cd:7c:cb:b1:6a:69:f0:5c:75:c3:55:f9:12:c2:5c:81:
79:94:06:5a:a8:d2:a5:d5:c6:f6:57:e6:ca:5c:aa:24:d2:32:
ab:4a:a0:96:d7:9f:06:2f:06:50:12:72:82:73:7b:af:07:e0:
b5:a5:73:fa:d2:de:3b:45:c3:dd:b6:36:47:4c:d6:0a:f2:d4:
8d:c5:71:7c:c4:0a:53:2d:ec:c5:e2:3e:db:66:f4:93:a8:bd:
2b:d7:1d:5f:6d:ec:65:06:7d:73:5d:6f:25:77:11:91:58:6f:
9d:f1:7e:51:03:bb:b1:9a:b4:90:76:ff:a9:2d:06:20:fa:79:
28:bd:fb:67:f1:d0:9e:e1:18:52:03:10:b8:3f:e7:97:39:f9:
ee:96:13:f9:64:f8:37:2a:e4:bf:f1:f9:cf:0a:e1:e8:8b:f6:
86:35:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:41 2024 by rpki-client on console-ams.rpki-client.org