Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.cer (raw, json)
Hash identifier: NLi9eQNigxzWjCRcj8S79APoMxxTNAh+L+sKCcvoQ4A=
Subject key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF9D5D59D720AF273491DA88D9BB8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39291
AS: 50681
AS: 60991
IP: 185.86.156.0/22
IP: 185.141.148.0/22
IP: 2a05:b940::/29
IP: 2a07:2540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9d:5d:59:d7:20:af:27:34:91:da:88:d9:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:80:58:ff:49:94:a9:98:6c:d5:1c:d5:e4:
13:9f:de:42:db:84:b5:31:59:2d:43:88:99:92:c3:
31:5f:62:9d:9e:64:08:fa:39:f5:48:3e:e8:7a:d9:
19:49:99:4c:48:00:b4:7c:f0:3e:e7:ce:0c:49:44:
6f:a0:6e:98:58:31:c8:35:38:04:74:d7:21:bc:d9:
74:e8:46:8b:ea:e8:03:1f:97:85:ec:85:86:0a:db:
9f:e9:3a:7c:53:6d:3e:29:ca:26:c2:f4:51:f5:36:
0c:ce:54:86:2a:d6:a1:d8:b9:55:66:cf:5f:d5:aa:
6f:ca:c5:bd:31:e2:0e:fe:dd:76:5c:45:14:c7:a5:
e7:8f:07:a8:81:05:32:bf:d6:6d:43:7d:4d:bf:00:
40:9e:a0:c8:b9:36:bb:b6:1e:b2:c5:2e:64:e5:a1:
56:a0:fc:dc:4a:9c:ab:ee:df:0e:bb:1c:fc:ce:a3:
9e:e3:f7:57:5d:14:b6:c3:b2:4e:4d:6c:d7:63:5b:
cc:44:47:a4:64:51:ea:aa:45:2c:e1:a2:7a:29:6a:
0c:8d:de:6c:46:db:82:bd:2d:a4:b4:be:0e:0c:a5:
d5:c5:b6:36:ad:50:57:a6:ff:c1:0e:98:55:59:93:
06:48:ce:e4:e0:bb:ae:3b:af:73:7d:8a:6a:ed:73:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.156.0/22
185.141.148.0/22
IPv6:
2a05:b940::/29
2a07:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39291
50681
60991
Signature Algorithm: sha256WithRSAEncryption
2e:c6:18:4c:3e:ca:3c:9b:f8:16:90:78:17:06:f8:e4:94:6a:
ee:e3:6e:01:2d:98:a3:34:be:05:bb:78:28:7f:7b:92:a3:7b:
78:70:32:5f:d9:7e:56:c6:43:2b:ab:4a:55:a9:8e:bf:bf:48:
e2:ce:2d:49:07:3c:aa:45:a1:d3:0a:6e:1d:a5:d9:78:7e:c6:
7f:7f:3d:24:c5:30:78:d0:64:31:b8:2f:22:01:3e:ee:76:18:
0e:b9:ab:f7:f0:ab:df:bd:13:22:c9:51:18:44:c5:7a:1b:d3:
ef:02:44:c0:ea:2a:51:04:3e:3f:1c:29:31:e9:dc:0d:1c:fa:
a5:3f:4d:85:9a:6b:97:a5:75:13:35:46:86:f5:ce:ea:8b:3a:
ad:6f:e4:98:ed:0d:22:91:5c:8f:d7:59:c8:9a:49:74:06:89:
53:ed:2e:75:f7:cc:18:3e:20:ff:05:34:5b:8e:9b:57:95:26:
ca:4a:14:e0:78:4f:a8:5c:1a:ac:91:b0:89:56:48:d1:37:42:
27:4f:29:a5:12:b4:38:bb:a5:83:b7:93:02:2b:03:16:19:bf:
1b:31:d2:75:22:6e:50:98:5b:8a:e1:59:44:50:03:c2:f2:77:
57:e6:14:87:a1:94:e8:3c:2d:7b:bd:3c:f0:78:d1:a6:2d:f4:
cf:f7:c2:b4
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAYzI351dWdcgryc0kdqI2buOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzcyMzlmM2VmZGIzNzkxZjViZTU1NTI5OWI1ZDgxNjk3ZjNkMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SAWP9JlKmYbNUc1eQTn95C24S1
MVktQ4iZksMxX2KdnmQI+jn1SD7oetkZSZlMSAC0fPA+584MSURvoG6YWDHINTgE
dNchvNl06EaL6ugDH5eF7IWGCtuf6Tp8U20+KcomwvRR9TYMzlSGKtah2LlVZs9f
1apvysW9MeIO/t12XEUUx6XnjweogQUyv9ZtQ31NvwBAnqDIuTa7th6yxS5k5aFW
oPzcSpyr7t8Ouxz8zqOe4/dXXRS2w7JOTWzXY1vMREekZFHqqkUs4aJ6KWoMjd5s
RtuCvS2ktL4ODKXVxbY2rVBXpv/BDphVWZMGSM7k4LuuO69zfYpq7XOPhQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFKxyOfPv2zeR9b5VUpm12BaX89ASMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2M4OTBm
Yy0yY2Y4LTQwNzUtODc1ZC1jY2ZjN2YwN2I5Y2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvYzg5MGZj
LTJjZjgtNDA3NS04NzVkLWNjZmM3ZjA3YjljYi8xL3JISTU4LV9iTjVIMXZsVlNt
YlhZRnBmejBCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuVacAwQCuY2UMBQEAgACMA4DBQMqBblAAwUD
KgclQDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAmXsCAwDF+QIDAO4/MA0GCSqG
SIb3DQEBCwUAA4IBAQAuxhhMPso8m/gWkHgXBvjklGru424BLZijNL4Fu3gof3uS
o3t4cDJf2X5WxkMrq0pVqY6/v0jizi1JBzyqRaHTCm4dpdl4fsZ/fz0kxTB40GQx
uC8iAT7udhgOuav38KvfvRMiyVEYRMV6G9PvAkTA6ipRBD4/HCkx6dwNHPqlP02F
mmuXpXUTNUaG9c7qizqtb+SY7Q0ikVyP11nImkl0BolT7S5198wYPiD/BTRbjptX
lSbKShTgeE+oXBqskbCJVkjRN0InTymlErQ4u6WDt5MCKwMWGb8bMdJ1Im5QmFuK
4VlEUAPC8ndX5hSHoZToPC17vTzweNGmLfTP98K0
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:20 2024 by rpki-client on console-ams.rpki-client.org