Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
File: 76CXauJceI-r_CqFN4HV3_DKVg8.cer (raw, json)
Hash identifier: AxGyW9h4nVynaP30aiAB3GDoJil2ky8ZPX/Pzbkvefo=
Subject key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB59DDE63535ECC78B2684F3B179C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12924
AS: 199913
IP: 185.42.120.0 -- 185.42.122.255
IP: 213.236.0.0/23
IP: 213.236.3.0 -- 213.236.4.255
IP: 213.236.7.0/24
IP: 213.236.20.0 -- 213.236.27.255
IP: 2a02:2280::/29
IP: 2a04:8fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:59:dd:e6:35:35:ec:c7:8b:26:84:f3:b1:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:a6:60:43:67:e9:ce:68:0b:5b:03:5c:93:
1d:e0:19:a8:40:bd:8b:c4:61:b6:17:21:96:53:43:
d6:f8:50:49:fc:75:b7:08:a3:72:d5:87:41:59:1d:
28:ef:11:ba:db:27:c1:95:fa:a0:f8:51:12:37:0d:
27:59:43:e0:27:db:91:cb:3b:9c:be:2c:26:6e:58:
66:54:61:ee:34:ac:9d:88:5b:12:3d:0d:70:a0:0a:
e1:d5:42:ba:fb:77:0d:92:46:6d:0b:5b:84:ab:35:
93:eb:95:47:53:c7:48:05:3e:dd:ac:5d:b7:a9:33:
13:b4:05:18:82:84:3c:0e:19:64:16:bd:01:d7:ee:
de:a2:ad:b9:02:ad:cc:2e:a6:cc:c8:21:65:4a:99:
d6:77:c8:09:c6:01:63:70:19:06:ee:42:9f:3e:a8:
33:55:bf:7e:2b:3f:3a:0f:5d:32:7e:74:4a:43:57:
36:ae:7b:49:93:26:6f:80:e1:b5:de:c1:39:e0:33:
ba:31:97:3b:20:ba:19:89:6e:80:76:6a:07:21:7a:
93:cf:42:0b:2a:8b:bd:e2:b5:c6:5c:84:79:3b:38:
0f:db:16:96:f6:47:d0:52:09:88:9b:0c:8b:d9:4f:
96:5c:0b:3a:6d:ba:c4:32:d5:04:5e:c7:cb:35:a9:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.120.0-185.42.122.255
213.236.0.0/23
213.236.3.0-213.236.4.255
213.236.7.0/24
213.236.20.0-213.236.27.255
IPv6:
2a02:2280::/29
2a04:8fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12924
199913
Signature Algorithm: sha256WithRSAEncryption
33:f6:5d:19:fa:a8:a8:15:fc:d5:ea:d6:dc:06:3c:ba:d1:98:
3d:7d:d1:70:1b:66:63:b1:4e:79:b0:a0:11:29:67:36:d8:81:
f4:f3:fa:a6:42:c4:be:79:72:10:ea:c1:f4:20:9c:ef:85:86:
c1:9a:ec:3d:36:f3:93:78:cd:87:4c:88:98:b8:a5:d5:e9:44:
3c:06:5d:a5:e9:9f:5f:b3:40:e1:f7:ce:90:0d:65:13:1a:48:
58:10:75:bb:75:ea:b0:0b:2a:e7:56:f5:00:55:57:b1:52:5b:
3c:78:2f:22:1b:bd:15:80:89:a7:69:5a:ea:ee:52:3c:7b:8a:
3d:04:27:d8:e6:e1:92:ce:0b:5c:f6:69:c8:dc:1b:8d:9b:32:
6a:eb:46:ff:9f:29:bf:3c:86:82:6e:2d:94:8a:d8:48:eb:56:
ab:59:99:69:a8:be:ea:66:5a:f8:57:c5:3f:52:ca:98:f7:ca:
89:e8:63:83:0b:07:14:14:f0:c2:66:c2:e4:85:c1:8f:88:cb:
c7:6f:46:b2:df:a0:ba:91:b7:45:5b:5b:a7:59:25:e6:8b:bf:
05:f0:31:79:df:d5:05:06:68:a4:15:19:5d:f7:98:76:ea:d2:
d6:fc:14:a9:01:bc:f1:05:64:b7:cb:27:df:56:c6:d6:ea:e7:
60:1d:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:23:48 2024 by rpki-client on console-fra.rpki-client.org