Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
File: x0heKfEYwBvobBnmaPrPpIXecYw.cer (raw, json)
Hash identifier: jalutJmeO8O6NzwjQqByPGGlxRSTafOMtW/7gS9uHWM=
Subject key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5003F6DC7E7555EB6B65AE10D00EF15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44472
IP: 86.111.52.0/23
IP: 185.43.147.0/24
IP: 2a12:c440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3f:6d:c7:e7:55:5e:b6:b6:5a:e1:0d:00:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7485e29f118c01be86c19e668facfa485de718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:67:81:c0:1f:14:b5:fe:50:17:e4:bf:7d:
26:22:25:e9:4b:65:6b:42:2a:57:13:e6:1c:3d:d2:
35:6d:64:1b:56:05:bd:d9:a8:51:0d:1a:d3:18:e8:
c4:b0:e2:45:80:e7:32:c3:52:c0:62:b8:6e:1f:20:
5a:7e:10:ff:f4:1a:6c:33:33:3c:04:09:a1:e0:55:
21:75:71:a5:72:52:74:6c:41:bd:30:08:f2:1e:1c:
b0:5c:72:6e:e6:c1:0a:01:24:fb:55:14:6e:67:04:
f3:ff:10:a3:35:d7:68:cb:3a:e7:5f:d2:4e:f1:9d:
b4:1d:1a:fb:f2:c4:d8:43:43:51:d6:95:7e:ce:a8:
5a:c3:bf:c0:9f:65:83:f3:c7:20:30:e4:1a:7d:52:
56:a0:5d:e7:aa:20:73:13:cf:f9:bc:c2:99:bd:a0:
0c:1b:33:a1:d0:99:30:82:c6:fa:59:98:a9:ee:0a:
c6:54:ac:4f:0c:68:51:65:cb:7f:a3:9c:f1:7c:33:
fa:4a:0d:84:5f:de:05:43:84:1b:44:97:72:41:61:
2a:ac:ec:80:4c:3c:29:f1:0b:ed:82:35:f6:57:44:
f2:cd:54:61:6d:a2:04:c7:e6:19:5d:62:d8:e8:0b:
85:35:b4:a3:61:1b:50:63:29:77:73:f6:c5:c1:2e:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
185.43.147.0/24
IPv6:
2a12:c440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44472
Signature Algorithm: sha256WithRSAEncryption
29:ca:d5:e4:c6:91:6b:3e:6c:ef:79:e6:07:a4:8a:a4:8f:79:
2d:b6:d9:7d:55:d9:03:4f:ed:aa:68:1b:98:59:d9:c5:0b:b4:
aa:96:14:57:57:c8:1f:89:af:9f:9b:ba:13:bc:69:34:1d:4a:
b5:d2:ab:36:42:2e:1d:bc:a7:61:ed:83:eb:23:8a:47:f3:f7:
af:67:06:3f:01:8d:a0:93:cf:2d:30:43:de:63:41:4b:b5:47:
4c:7b:1b:19:d7:ac:0f:77:a6:9f:bd:2d:48:e3:53:da:c9:59:
b6:86:01:16:ce:5d:e0:17:14:05:c5:83:ea:41:1e:69:fa:0c:
4b:ba:7e:6a:81:0d:ec:b8:15:3c:ed:15:76:ef:33:e0:a7:8d:
87:17:bc:ff:54:29:06:68:13:7d:99:b4:92:59:8e:5b:04:d9:
35:f6:43:fd:27:c5:3b:31:b0:50:1d:b7:ba:9f:5a:05:51:86:
70:e7:ba:1c:ae:34:70:31:b2:39:4c:27:52:29:15:21:f6:a5:
8b:5d:07:27:80:6a:49:f5:85:bd:5e:b9:21:c6:6f:06:78:49:
9f:a6:ea:ef:e3:34:d6:7c:dc:9c:df:73:b9:6c:36:eb:ca:c0:
bc:1a:2a:f0:4d:46:33:9b:9d:76:6a:10:ec:2f:35:b2:73:c3:
87:c5:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:24 2024 by rpki-client on console-fra.rpki-client.org