Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.cer
File: 3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.cer (raw, json)
Hash identifier: w+bz3Eemqas2KDAvPEPC5San2Pzem+X8ZU7VvEKWs6k=
Subject key identifier: DE:81:71:49:1D:89:09:2D:A3:6C:15:FC:81:4E:53:8B:9B:FA:39:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DDD0A0EEB00F0903156211FBC6C12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15377
IP: 5.252.180.0/22
IP: 46.98.0.0/16
IP: 88.218.180.0/22
IP: 91.201.68.0/22
IP: 91.215.52.0/22
IP: 91.233.96.0/22
IP: 91.236.96.0/22
IP: 91.243.192.0/19
IP: 178.215.160.0/20
IP: 185.205.144.0/22
IP: 185.244.140.0/22
IP: 192.162.108.0/22
IP: 193.108.248.0/22
IP: 212.115.224.0/19
IP: 2a05:8dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:dd:0a:0e:eb:00:f0:90:31:56:21:1f:bc:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de8171491d89092da36c15fc814e538b9bfa3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:03:8a:95:06:75:b3:78:cf:80:69:7a:3e:
89:a6:02:66:7c:7b:18:0c:95:18:02:f8:e5:33:c2:
c4:8a:2e:bf:cf:ce:e4:c7:52:13:c9:30:88:c4:cb:
b3:3a:18:d8:2b:3a:8f:22:30:da:71:b3:70:61:30:
20:74:19:4c:f7:36:15:25:cd:b5:c2:8b:a1:4a:b6:
62:6b:a2:a4:ba:ee:58:f4:9b:5c:93:d9:af:95:f1:
38:6b:19:cc:00:3a:ca:d6:d7:5c:48:ce:c9:19:03:
9e:61:84:dc:17:b0:53:96:3c:d7:95:2e:e4:ef:c1:
6f:4c:21:15:79:2e:03:5a:d8:0a:b0:d9:b0:6d:46:
3a:28:5f:f1:25:e3:63:74:5d:14:95:83:5e:04:bf:
c1:a4:73:26:e9:ff:4f:cc:7e:07:02:8d:86:2d:bc:
fa:88:15:c7:3f:77:ae:b9:9e:7c:42:8f:12:f7:f7:
6a:4f:09:be:bf:03:c0:6d:6f:c2:6a:6a:2e:89:b7:
58:bd:b2:09:e9:4c:d5:9e:29:90:e4:5d:67:e5:94:
5a:05:d5:dd:6f:de:dc:63:56:7e:6d:0f:18:55:12:
ad:11:bb:7f:48:9a:9e:70:ec:a9:07:62:67:75:1f:
95:38:63:16:cb:74:c1:29:32:7f:2a:f4:f6:1f:d9:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:71:49:1D:89:09:2D:A3:6C:15:FC:81:4E:53:8B:9B:FA:39:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.180.0/22
46.98.0.0/16
88.218.180.0/22
91.201.68.0/22
91.215.52.0/22
91.233.96.0/22
91.236.96.0/22
91.243.192.0/19
178.215.160.0/20
185.205.144.0/22
185.244.140.0/22
192.162.108.0/22
193.108.248.0/22
212.115.224.0/19
IPv6:
2a05:8dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15377
Signature Algorithm: sha256WithRSAEncryption
64:ff:70:42:fa:ae:4e:e4:9d:d0:7a:96:0d:1a:86:18:02:2d:
00:ba:52:94:68:2a:f4:f8:c7:3e:20:2c:cd:0c:a1:c4:ec:75:
6d:8f:68:3d:9e:57:2c:e1:a7:de:9a:6d:b5:da:78:6b:db:09:
c6:6b:97:e7:a6:92:d9:52:12:b0:f6:33:63:52:8d:23:c9:82:
96:db:69:48:bb:f1:02:29:59:8a:f8:99:d9:d8:7d:53:bb:0d:
86:f3:46:ea:dd:b0:49:0e:ff:e1:a0:d0:58:89:ac:dc:a7:3b:
a2:90:31:5a:72:45:71:15:0e:d4:96:cb:c9:61:25:0c:4b:d0:
91:9a:af:b6:3b:85:8c:f0:31:40:8f:f3:d2:ba:58:28:74:98:
bb:81:fa:e0:96:76:2c:7f:ff:2c:1c:33:d6:20:c9:e9:18:92:
f2:c2:3b:69:d2:d7:ef:68:a0:12:76:0c:83:68:04:62:32:8e:
cc:c1:6d:1c:2c:7b:96:ba:c4:91:a8:36:4f:ea:f6:6a:f0:9a:
d0:ec:f8:90:7f:ea:7c:dd:ad:5c:b0:bf:77:b3:1c:68:f1:bc:
17:2c:c1:65:ca:e4:85:e5:ea:1b:f2:7d:63:88:6e:e3:fc:28:
f0:fa:fd:03:49:30:a8:ea:23:3a:05:04:3e:91:34:32:e9:64:
a7:74:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:01:15 2024 by rpki-client on console-ams.rpki-client.org