Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
File: 34h388VbUo4aKds9eZIGVvDGaus.cer (raw, json)
Hash identifier: M5km7ZyVxpFoUm7imrnWQbDYRxxSot1d+IxO6m2f3oU=
Subject key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF707BAB804EDEA74E01EAA906EE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21183
AS: 50973
IP: 66.186.194.0/23
IP: 66.186.198.0/23
IP: 79.171.48.0/21
IP: 80.78.64.0/20
IP: 91.132.172.0/22
IP: 94.137.144.0/21
IP: 109.69.0.0/21
IP: 141.98.140.0/22
IP: 185.62.172.0/22
IP: 185.200.212.0/22
IP: 188.172.96.0/20
IP: 217.73.128.0/20
IP: 2a04:eb40::/29
IP: 2a09:ca80::/29
IP: 2a0a:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:07:ba:b8:04:ed:ea:74:e0:1e:aa:90:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:0a:c0:09:e7:88:b4:68:a9:15:42:40:54:
df:d7:45:95:7a:a7:d5:bc:b4:5c:a0:d2:e0:70:68:
6e:d0:a3:1a:73:f4:c1:e0:fe:33:c3:19:75:27:f2:
f8:6f:21:7c:0f:ae:e1:73:5e:1d:1d:d6:71:de:89:
5a:d5:b7:ea:63:c1:50:52:e4:cb:fd:c5:e1:bc:58:
8e:57:c5:3e:8e:a2:8d:02:8c:d1:33:44:1e:c0:f2:
89:a5:7f:7c:94:ed:97:70:41:10:74:41:95:69:bb:
20:8a:6b:d5:3d:51:b0:67:4e:8c:87:cf:1a:32:1d:
03:fc:10:6e:22:0e:fb:67:b5:44:f9:ff:a7:3d:62:
45:98:53:99:de:6f:a4:0e:70:3f:f1:f8:a8:e8:6f:
78:fb:b1:1c:2e:3f:40:1a:0a:cf:49:fa:a8:c7:78:
90:6f:3a:f4:48:e3:9c:e1:e1:7b:c9:59:8b:34:eb:
ad:b1:4d:77:ec:39:79:f1:fe:2b:84:73:51:7c:5f:
d6:c5:42:89:65:99:7c:fe:39:ac:46:3a:a1:ff:62:
c3:a3:f8:db:09:c9:d1:58:8e:c1:49:73:89:57:5a:
05:5a:98:85:ee:fe:cf:db:4c:74:e2:96:b4:3d:1d:
a6:f9:43:4a:e7:63:1e:72:46:76:40:01:0f:c2:fe:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.186.194.0/23
66.186.198.0/23
79.171.48.0/21
80.78.64.0/20
91.132.172.0/22
94.137.144.0/21
109.69.0.0/21
141.98.140.0/22
185.62.172.0/22
185.200.212.0/22
188.172.96.0/20
217.73.128.0/20
IPv6:
2a04:eb40::/29
2a09:ca80::/29
2a0a:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21183
50973
Signature Algorithm: sha256WithRSAEncryption
96:1e:8f:3c:69:c8:11:6f:d5:99:cd:50:5c:e9:22:54:83:7a:
46:7f:64:a2:30:1d:15:15:bd:b9:3c:ea:79:7a:85:35:cf:f7:
a7:4c:4e:e7:ba:3c:a6:b2:cf:94:cd:6b:52:c2:78:dd:0f:0b:
1d:13:69:5a:18:2c:46:d7:22:4f:22:4b:0c:45:1a:16:af:f7:
c4:40:ff:e1:de:93:8c:a4:8d:ef:28:c9:9c:8b:10:2d:9a:52:
c9:bb:b9:58:4e:1e:7d:54:cd:03:9c:ff:1e:61:42:51:01:11:
c8:8d:ac:f0:e2:2d:2a:41:c4:ba:04:ca:ea:99:d2:af:92:6c:
f5:42:02:bc:67:7f:a8:5c:41:77:25:b6:db:28:da:0d:16:dd:
65:ab:52:90:0b:bd:c6:a3:75:28:f3:de:86:9b:e0:11:bb:48:
4e:d6:ea:f9:e8:fc:68:54:19:45:16:c6:af:6f:59:25:03:2e:
0c:03:c3:50:a8:dd:22:c2:3e:73:00:38:dd:78:d1:e3:18:c4:
e9:e9:68:dd:4c:dd:6e:a5:e2:e9:b1:1f:b4:75:5a:5f:11:b3:
5a:7d:a1:b5:70:d4:a3:d7:88:cc:6d:b4:55:f4:4e:c8:90:f1:
50:5e:f9:ac:88:4c:41:ec:d5:f7:3e:57:84:00:99:66:39:53:
a1:79:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 00:05:31 2024 by rpki-client on console-fra.rpki-client.org