Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.cer (raw, json)
Hash identifier: X7DtSWhOhyShKzdOVlZbZ+wEHaTKpHk8nLPtUOytF50=
Subject key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F93EBC4FFB11A376B33359AA5772F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62068
IP: 5.182.208.0/22
IP: 45.14.224.0/22
IP: 45.87.40.0/22
IP: 91.226.227.0/24
IP: 91.230.49.0/24
IP: 146.19.248.0/24
IP: 185.224.128.0/22
IP: 185.244.36.0/22
IP: 2a0d:2400::/29
IP: 2a0d:2780::/29
IP: 2a0e:16c0::/29
IP: 2a0e:1740::/29
IP: 2a0e:2000::/29
IP: 2a11:b240::/29
IP: 2a12:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:93:eb:c4:ff:b1:1a:37:6b:33:35:9a:a5:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:4b:0b:ac:dd:1b:97:aa:95:c8:4f:e9:49:
72:e7:92:ce:ba:d5:5a:f3:2b:28:3e:d4:68:d8:7a:
b7:42:97:f2:d4:7c:ba:a9:78:dd:5e:30:d2:13:81:
4c:6a:e8:3e:70:6b:7d:8a:52:24:30:f8:f1:22:0c:
ab:a1:bc:50:61:be:4a:2d:a2:8b:1e:65:cf:07:57:
6f:7b:c1:c8:31:2a:0d:fa:27:5f:dc:9f:33:97:aa:
59:e9:d3:4f:59:95:6d:35:a4:68:74:1d:e8:76:85:
6c:ee:40:e0:1e:42:f3:0b:75:80:68:f7:0a:ca:fb:
e1:96:88:99:cd:cf:50:d6:a0:96:30:82:53:06:14:
b8:3c:97:f3:10:4b:ad:4c:81:d8:e8:86:e2:62:57:
5e:ff:e7:fc:b7:c2:d4:06:23:67:58:a2:10:7e:ae:
5d:ba:49:79:91:01:a0:a0:1d:1c:f0:67:ad:3c:31:
ba:33:e6:de:50:d7:44:31:18:ba:fc:87:54:16:94:
a2:45:63:30:5c:51:ef:e0:2f:6a:88:60:50:5f:b8:
89:0c:44:21:13:d9:f7:6e:6e:cf:ed:00:27:a2:8d:
66:23:41:4a:f7:a1:4a:df:92:01:a4:e7:22:cb:e2:
8f:5b:ad:d1:34:91:88:55:3a:94:37:cb:4b:c3:06:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.40.0/22
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62068
Signature Algorithm: sha256WithRSAEncryption
74:56:cd:d4:e8:9e:6e:f4:f8:9a:d0:ea:68:0c:6c:de:56:99:
3c:0f:00:e7:61:15:69:d6:6c:d0:28:e0:a9:0b:e8:19:66:e3:
b1:cc:d8:fa:46:c7:af:e8:46:66:62:44:6b:33:46:a3:d4:ad:
2a:e5:48:49:1f:a9:40:16:d7:00:fa:ef:a3:e9:eb:cb:41:bd:
d9:c0:72:fc:d7:73:19:ea:9e:1f:fb:b0:d1:07:cb:1c:4d:04:
ef:e7:a1:00:36:24:bf:9a:56:5c:2a:2a:c6:c1:d0:2e:95:fc:
ba:7e:d4:36:7c:37:92:c2:82:d6:f9:67:d9:55:37:7d:7d:61:
c6:c1:3c:a8:2f:20:4c:e4:5e:27:b1:f7:44:a2:67:d4:80:e2:
de:ee:5c:ff:a7:c8:2f:50:db:79:ba:ab:c9:a4:50:8b:0c:98:
88:a1:9a:73:5c:7d:d5:06:ae:46:69:7b:ed:f5:f5:4f:6d:20:
7b:7e:ff:e5:61:03:99:59:9f:c5:f4:5b:58:44:a7:28:2d:86:
c6:a7:86:5b:36:c1:4c:9b:0c:4e:d2:c3:c5:95:1b:28:6c:25:
38:1a:f3:8c:95:f3:7a:e0:d2:90:65:16:ce:d3:ed:4c:ca:48:
25:14:d4:a0:16:5d:41:07:58:f5:57:c1:00:6b:b8:74:29:d8:
0a:a2:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:38:32 2024 by rpki-client on console-ams.rpki-client.org