Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
File: DLXT6N3PUkwgwyOH7TED1MvypWo.cer (raw, json)
Hash identifier: OCQxfAk3rf2DLqCCHrb5txqXHI2QwJRAUMuNbrXJfF0=
Subject key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A32275DC138F005DB81449B91B512
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3308
AS: 9167
AS: 12435
IP: 62.44.128.0/18
IP: 62.198.0.0/15
IP: 85.235.224.0/19
IP: 89.233.0.0/18
IP: 185.56.56.0/22
IP: 185.223.12.0/22
IP: 194.19.128.0 -- 194.19.223.255
IP: 194.255.0.0/16
IP: 195.184.96.0/19
IP: 212.97.192.0/18
IP: 213.150.32.0/19
IP: 213.173.224.0/19
IP: 217.74.128.0/19
IP: 2a01:3a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:27:5d:c1:38:f0:05:db:81:44:9b:91:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:e1:3c:99:b5:5c:91:10:b4:74:ef:79:a1:
b1:2c:ee:0e:94:c5:be:dd:72:63:23:70:cb:e8:01:
03:37:99:79:a8:21:dd:55:b9:ad:6f:97:45:e7:ec:
cc:23:c1:b5:b9:80:56:a2:21:c3:66:4b:71:53:1c:
12:4e:e1:b7:4e:da:8a:cb:17:c7:8a:2d:90:a6:ea:
80:4d:7e:90:3d:58:33:27:14:9c:92:40:86:53:ee:
45:72:a3:58:3d:af:29:1a:d4:d5:bc:60:30:04:78:
ea:93:1d:61:50:2d:c4:32:72:7a:c2:83:dc:2e:cb:
8d:e0:69:2a:1a:0c:6c:8c:99:1d:a5:67:15:ce:3b:
12:0e:a5:00:81:24:65:21:53:47:20:95:cb:7e:0f:
8d:f3:8e:a4:85:d1:f8:68:8f:6f:13:b7:f3:f7:ef:
5f:a5:fd:d5:7d:1a:10:22:4b:37:5d:c9:b2:88:31:
4e:7c:f7:e8:80:8d:08:df:65:34:4a:fb:8e:60:a6:
4c:23:6a:55:45:ed:41:ad:5a:8c:f1:31:65:9e:e1:
8e:9e:dc:ee:ff:c9:ad:8f:85:e2:37:08:57:d1:46:
58:0b:d0:8f:4f:8b:f6:da:e9:e6:23:ef:be:41:21:
d0:75:62:fe:73:94:be:75:5f:b1:f0:90:4b:55:bf:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.128.0/18
62.198.0.0/15
85.235.224.0/19
89.233.0.0/18
185.56.56.0/22
185.223.12.0/22
194.19.128.0-194.19.223.255
194.255.0.0/16
195.184.96.0/19
212.97.192.0/18
213.150.32.0/19
213.173.224.0/19
217.74.128.0/19
IPv6:
2a01:3a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3308
9167
12435
Signature Algorithm: sha256WithRSAEncryption
90:e5:f1:ef:a6:6c:ee:85:1b:12:5f:71:fa:69:36:f9:cb:e0:
d8:3d:26:51:0e:fc:4e:92:2f:fb:8b:27:28:1f:3f:ac:07:c1:
ce:54:4c:6e:f5:62:43:6d:4b:51:f3:a3:7d:cc:dc:7a:e8:55:
a7:67:2f:31:c9:66:c9:3e:39:76:6d:f6:55:b8:74:10:de:14:
89:26:5f:f8:9a:80:1e:4a:bd:6a:7d:03:24:44:bc:84:8c:a2:
8f:05:bb:91:2b:cd:30:21:ff:42:c0:87:c8:c8:99:35:df:de:
22:5e:1b:29:d9:46:04:61:97:f2:ec:f0:0b:40:4a:c9:1d:5f:
35:20:30:10:32:87:3d:cf:a5:91:da:18:46:b3:86:b1:6a:4e:
6e:c2:37:b4:fe:ce:9c:b7:f8:8a:11:24:11:91:1e:62:51:c5:
0d:f9:c0:18:ca:01:ae:4f:b0:2e:e4:22:e1:7e:04:f0:e0:4a:
1d:02:d8:55:7a:a5:88:dd:5c:d0:59:2c:b7:aa:d5:a9:6f:16:
ad:a9:32:bf:5a:cc:b2:bc:ba:49:35:08:ae:d6:74:f0:b5:06:
f6:af:53:de:58:4c:ea:46:08:75:71:e2:d5:30:b5:1c:bc:6a:
02:24:d5:d7:1d:af:73:11:19:0b:b1:b6:89:56:28:d1:a0:e3:
fb:8f:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:29:17 2024 by rpki-client on console-ams.rpki-client.org