Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer (raw, json)
Hash identifier: JsKlHIFgjDmPbJQfD/4b3WeagyC578OoV5l1iAwHS44=
Subject key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500712EE68E15720BA2A0A9735E5B8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29413
IP: 31.187.80.0/22
IP: 31.187.88.0/22
IP: 37.156.80.0/20
IP: 46.31.216.0/21
IP: 88.133.160.0/20
IP: 88.133.224.0/21
IP: 91.217.176.0/24
IP: 185.31.60.0/22
IP: 185.91.48.0/22
IP: 213.149.80.0/20
IP: 213.178.16.0/20
IP: 217.72.208.0/20
IP: 2a02:2488::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:71:2e:e6:8e:15:72:0b:a2:a0:a9:73:5e:5b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:36:d7:87:42:60:71:6a:55:d8:5a:74:fd:
02:51:e0:64:56:89:96:91:cd:be:b8:98:c1:20:e0:
bb:cd:19:02:46:8c:ed:ba:86:db:15:2e:57:49:98:
f5:e0:af:1d:56:d9:c7:33:e6:a1:df:e1:65:45:78:
de:ac:bc:33:80:86:aa:0c:5d:ae:9e:ba:64:4f:56:
7d:c6:25:9d:73:d3:4a:96:3a:2b:df:69:58:a7:66:
df:52:63:20:de:84:eb:ab:fd:50:de:d4:4a:1b:46:
72:95:7a:7d:b8:23:4a:92:d1:22:9a:74:74:02:79:
d6:20:2a:53:6c:3a:5b:30:ed:5a:a9:17:e9:a3:11:
bc:b4:6e:7b:15:1d:0d:c1:5a:02:e4:1a:7b:7e:1b:
c1:5c:42:bd:a1:c2:fb:af:ef:12:e8:79:82:64:3f:
1e:11:03:d4:f5:e0:25:52:c7:c7:75:97:ac:5e:0d:
bd:72:f0:35:7e:da:c7:cf:44:8e:03:59:f5:3c:f6:
5b:bd:0a:ce:b9:37:43:71:4d:93:6f:47:ac:db:a3:
c1:88:7f:fb:fa:b9:76:8b:15:47:0f:cf:98:bb:db:
e3:6c:a9:4f:2b:b7:8c:07:6d:81:4c:9e:15:ac:7d:
35:ae:94:82:cc:9c:ef:f5:9f:b0:3f:bd:a3:ee:3c:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.80.0/22
31.187.88.0/22
37.156.80.0/20
46.31.216.0/21
88.133.160.0/20
88.133.224.0/21
91.217.176.0/24
185.31.60.0/22
185.91.48.0/22
213.149.80.0/20
213.178.16.0/20
217.72.208.0/20
IPv6:
2a02:2488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29413
Signature Algorithm: sha256WithRSAEncryption
9f:96:17:14:58:f1:03:e3:9e:02:2e:71:1c:96:bf:10:78:79:
e3:49:85:1c:37:7b:dc:20:b1:a3:76:c6:28:ee:cc:a3:98:e7:
60:17:0c:56:28:08:b2:85:91:73:e2:34:bc:ea:03:88:33:53:
b7:b0:f6:50:e4:53:12:34:28:0e:dd:92:1f:b3:b0:b1:9e:db:
92:50:c3:fd:ee:3b:c4:1b:41:7d:7b:02:0f:0b:a3:a8:2c:4f:
d3:f3:12:4d:7f:ec:37:ca:2a:6a:ef:b8:f8:91:e0:c8:4b:60:
4f:cd:dc:60:aa:db:66:38:1e:b4:63:4c:63:a7:44:15:99:f9:
72:f5:33:1c:07:38:87:2a:a0:4f:5f:d3:2e:29:2c:ab:46:a4:
1a:af:e3:f8:fa:20:38:9b:23:6c:e7:42:da:e3:46:fd:d3:67:
8d:97:63:5e:36:fd:ce:1b:53:2b:32:88:6a:0b:9a:68:5b:e2:
cc:44:5b:53:f9:d6:06:04:ef:6d:8b:7a:d5:51:84:f6:c8:23:
1f:54:f4:91:ce:34:fe:e8:00:b1:d9:8a:d2:fa:e7:5f:f5:5a:
81:ae:19:ed:42:3c:a6:0f:a5:20:43:02:96:a8:47:76:f6:bd:
78:af:c3:a5:36:8e:50:98:9e:79:52:68:33:87:e5:c9:11:78:
76:bb:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:40:46 2024 by rpki-client on console-ams.rpki-client.org