Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/507hho-W3TemuByx9tKNbC9-dG8.cer
File: 507hho-W3TemuByx9tKNbC9-dG8.cer (raw, json)
Hash identifier: XzCsS08fX90An7vXHPp/s1RxFSpKrIn+a0svXeZiIzQ=
Subject key identifier: E7:4E:E1:86:8F:96:DD:37:A6:B8:1C:B1:F6:D2:8D:6C:2F:7E:74:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A62A115BCFFD3BE8233A904712FAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/365c3f-415e-4cd5-9a4b-66d3a89152ac/1/507hho-W3TemuByx9tKNbC9-dG8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/365c3f-415e-4cd5-9a4b-66d3a89152ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31463
IP: 37.209.208.0/20
IP: 45.140.136.0/22
IP: 46.245.248.0/21
IP: 79.99.64.0/21
IP: 94.228.32.0/20
IP: 109.74.20.0/22
IP: 178.17.32.0/20
IP: 178.251.32.0/21
IP: 185.4.128.0/22
IP: 185.34.208.0/22
IP: 185.160.164.0/22
IP: 185.167.228.0/22
IP: 2a00:1c18::/29
IP: 2a00:5780::/32
IP: 2a0d:4140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:62:a1:15:bc:ff:d3:be:82:33:a9:04:71:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e74ee1868f96dd37a6b81cb1f6d28d6c2f7e746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:2a:4d:66:d0:df:bc:a7:5c:85:10:eb:3c:
50:f4:7d:b0:4d:02:60:c6:6b:88:c7:bf:60:bd:cd:
ef:9e:69:d2:38:83:83:40:e3:16:2b:5f:04:db:af:
39:7e:db:f3:bc:bb:46:c1:c3:45:ac:33:96:ea:03:
83:1b:56:f2:ec:f2:25:5f:be:c2:1c:ca:c8:eb:81:
71:c3:e3:51:98:5f:f6:7b:8d:81:3b:7a:ae:6e:c5:
54:a2:33:47:f0:8b:64:a4:fa:77:fa:e3:98:22:ab:
fc:a2:fa:0a:4a:a2:8c:19:bb:bb:5d:ef:c1:50:67:
62:40:9d:5f:11:6a:73:ac:1f:0d:fb:3f:b0:17:ba:
c7:e7:30:d0:4a:53:24:9d:58:b4:24:45:55:f7:db:
29:30:b9:ab:4c:75:cc:6c:95:90:e6:be:05:e8:0c:
38:25:fe:83:f1:61:0d:f2:79:7a:3e:d2:2d:12:84:
ae:30:98:9a:68:4a:8c:ec:56:a0:f4:4e:cc:2e:13:
28:3e:6d:38:14:41:cd:bd:0e:0c:32:4c:78:d9:f5:
98:99:6f:b8:eb:87:f1:68:0d:f1:0d:e0:1c:ab:f3:
35:8c:30:bf:13:e4:f5:17:85:69:9e:18:ba:69:00:
a8:d4:ba:a0:87:9e:21:7b:4d:6f:d6:84:ce:cb:20:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:E1:86:8F:96:DD:37:A6:B8:1C:B1:F6:D2:8D:6C:2F:7E:74:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/365c3f-415e-4cd5-9a4b-66d3a89152ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/365c3f-415e-4cd5-9a4b-66d3a89152ac/1/507hho-W3TemuByx9tKNbC9-dG8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.208.0/20
45.140.136.0/22
46.245.248.0/21
79.99.64.0/21
94.228.32.0/20
109.74.20.0/22
178.17.32.0/20
178.251.32.0/21
185.4.128.0/22
185.34.208.0/22
185.160.164.0/22
185.167.228.0/22
IPv6:
2a00:1c18::/29
2a00:5780::/32
2a0d:4140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31463
Signature Algorithm: sha256WithRSAEncryption
6a:ec:4b:51:f0:05:43:47:db:dc:6d:42:02:e6:9c:71:8a:bf:
a5:94:93:47:52:8b:cd:9c:53:fb:85:52:2a:5c:09:ee:28:0b:
87:4f:76:cd:48:a8:3b:11:08:53:88:02:fd:25:3a:e8:85:5f:
2c:d9:dd:31:ea:76:bb:09:bc:83:43:6c:1e:e0:62:39:a6:60:
fa:29:81:e3:bd:55:66:51:19:8a:7f:9e:03:c8:7b:e6:bc:9b:
20:31:91:05:86:ac:b7:0d:22:25:f8:20:ae:a9:b1:ba:9f:39:
e6:61:e0:81:df:9b:d2:f2:c0:dc:51:2d:1b:4b:a7:51:f0:80:
8d:3a:c7:87:a3:f2:2f:2a:0e:09:0b:2c:94:bb:eb:33:35:7f:
06:1a:d0:18:92:53:64:20:1c:a9:b4:c6:90:b1:7b:36:72:b4:
10:f2:c1:18:f9:e5:c1:44:aa:f9:a8:65:77:b2:e2:3a:bf:d1:
25:f4:f2:95:1b:32:b3:9f:dc:51:77:22:8c:04:0e:f8:16:55:
39:00:47:81:04:0d:58:1a:70:3c:04:b6:6c:d4:3c:cd:80:eb:
12:8b:48:77:88:33:9b:a6:1a:ba:b6:70:66:0d:a7:09:07:27:
b3:4c:54:ad:35:83:36:b9:74:ba:19:d2:e0:54:87:11:03:92:
45:b3:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:32:33 2024 by rpki-client on console-ams.rpki-client.org