Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G3EwLmLFDV0mTf8P122G8ZkbDAQ.cer
File: G3EwLmLFDV0mTf8P122G8ZkbDAQ.cer (raw, json)
Hash identifier: ft9CltKmqjHcQZ2yEzhHoA7hOXpWOe49wFQJU03ClVU=
Subject key identifier: 1B:71:30:2E:62:C5:0D:5D:26:4D:FF:0F:D7:6D:86:F1:99:1B:0C:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A82E6F5B6429BD31FC52A8CF7C382
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/13dc99-843f-4410-8446-c44785fba4a3/1/G3EwLmLFDV0mTf8P122G8ZkbDAQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/13dc99-843f-4410-8446-c44785fba4a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199448
IP: 89.106.224.0/21
IP: 185.6.196.0/22
IP: 185.7.164.0/22
IP: 185.45.168.0/22
IP: 185.164.220.0/22
IP: 2a02:ce40::/29
IP: 2a03:1d40::/32
IP: 2a04:a440::/32
IP: 2a0b:8c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:82:e6:f5:b6:42:9b:d3:1f:c5:2a:8c:f7:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b71302e62c50d5d264dff0fd76d86f1991b0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:f7:31:23:2c:36:1c:7b:ab:84:9b:38:6d:
2b:eb:56:a6:75:6f:88:f5:5a:dc:6b:1b:73:67:44:
81:71:61:88:61:d9:8c:16:d6:f9:ec:d5:32:59:ef:
ba:39:a4:18:ee:ee:91:eb:f8:56:50:0b:ef:4f:7b:
cb:2d:57:8e:d8:a3:d5:6e:8d:07:97:e8:dd:a4:08:
e4:59:10:bb:26:a4:84:64:2f:a8:04:dd:e7:b8:6e:
a6:f9:84:c3:bc:02:6e:62:54:23:22:0c:b7:83:12:
8b:ca:5f:9d:1a:3b:b8:97:45:cc:c8:cf:68:6a:61:
9a:a3:a0:d6:c0:a7:01:8b:6b:74:98:4d:f3:d4:2b:
f8:e3:41:f7:13:31:1b:69:1e:b0:67:9c:de:6c:18:
59:d5:ba:2b:af:33:52:c8:db:38:96:5e:91:c6:96:
6c:ad:50:c9:79:53:98:c2:8d:8a:7f:14:80:bc:5e:
09:4d:03:b1:b3:46:30:d4:81:46:5f:56:2f:81:71:
0b:67:8c:4f:07:b8:8d:02:ee:65:64:89:b2:0e:ac:
55:27:51:af:1e:68:15:cc:70:59:8a:0d:be:93:29:
9e:a9:bc:80:96:c0:e6:53:39:80:21:67:41:70:2c:
cb:b6:47:c9:58:04:01:aa:3e:e0:7c:d3:a7:c5:d8:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:30:2E:62:C5:0D:5D:26:4D:FF:0F:D7:6D:86:F1:99:1B:0C:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/13dc99-843f-4410-8446-c44785fba4a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/13dc99-843f-4410-8446-c44785fba4a3/1/G3EwLmLFDV0mTf8P122G8ZkbDAQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.224.0/21
185.6.196.0/22
185.7.164.0/22
185.45.168.0/22
185.164.220.0/22
IPv6:
2a02:ce40::/29
2a03:1d40::/32
2a04:a440::/32
2a0b:8c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199448
Signature Algorithm: sha256WithRSAEncryption
ae:5c:81:90:07:72:fd:42:bd:f2:54:b5:31:4c:da:84:0f:8e:
17:7f:95:a0:c6:9d:86:2a:97:33:0f:25:3e:aa:95:f3:bd:1d:
2f:0b:18:dc:df:82:ed:37:ce:8d:45:21:3c:aa:83:d3:26:60:
9b:d4:3c:59:79:39:75:6d:06:15:10:56:5d:cb:65:3d:5c:b0:
d8:8d:05:83:17:65:79:5e:a2:f3:e5:fa:db:42:0b:21:9a:8c:
e4:ac:c3:b3:c7:b0:fc:ca:f5:29:1a:ee:37:53:3f:da:24:f5:
25:e5:f1:d9:5a:32:a1:51:68:27:f4:a3:23:b3:22:96:af:13:
41:6f:5a:69:bf:cd:3b:b8:8a:2f:71:b4:21:02:ef:f5:d0:aa:
0e:ff:01:49:73:ae:c7:89:f7:e8:70:fa:64:11:87:1f:a2:a8:
a5:60:2a:bd:1a:7a:27:49:30:49:43:06:03:5a:e7:97:8e:87:
a0:e5:2e:d2:e3:db:f3:0c:cc:d8:89:52:4a:95:08:80:68:02:
68:62:6c:64:1f:f6:ee:dd:b8:f6:01:00:c9:6a:aa:28:e6:ea:
13:ff:90:32:03:fb:ee:df:62:1f:cb:b2:78:a5:ee:95:50:0d:
bd:11:99:9b:25:b5:7c:38:07:a8:1e:0f:57:48:1b:c1:4d:18:
b0:aa:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:20:41 2024 by rpki-client on console-ams.rpki-client.org