Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer (raw, json)
Hash identifier: A4XCoMrsaM/btk4GagJL34z7RL87zez13z7w+5Z6v/o=
Subject key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7361A50FDE35F723EE377733A96BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42926
IP: 31.210.64.0/18
IP: 46.45.128.0/18
IP: 77.75.32.0/21
IP: 79.98.128.0/21
IP: 94.101.80.0/20
IP: 176.53.0.0/17
IP: 178.211.32.0/19
IP: 185.25.100.0/22
IP: 185.157.40.0/22
IP: 185.184.208.0/22
IP: 213.128.64.0/19
IP: 2a00:56a0::/32
IP: 2a01:790::/32
IP: 2a0b:5f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:36:1a:50:fd:e3:5f:72:3e:e3:77:73:3a:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:12:a2:85:b7:4f:09:6c:f4:a3:b8:c0:cd:
e0:f5:e0:3c:5d:4e:de:05:5b:11:f5:74:79:d4:c3:
1d:1a:31:e1:80:85:4e:1f:a5:8d:f1:6d:82:07:a5:
5e:0c:da:4c:c7:36:1e:c2:e0:cf:20:a0:3a:73:03:
28:13:91:2d:f7:49:59:2c:ac:16:88:66:3e:10:da:
3d:d0:9c:dd:b8:77:23:f4:c3:96:6e:a1:0f:a2:8a:
ce:e5:0b:53:e0:c7:8b:4f:ef:8e:99:07:7d:87:1d:
c5:cd:8f:7f:fc:a3:b6:c2:65:53:68:11:ac:5a:5e:
5e:7d:18:a9:28:ee:71:e6:1d:fa:00:f6:75:a4:dc:
62:57:16:56:aa:20:aa:77:6c:2e:77:2e:59:45:9c:
61:08:97:19:09:19:0f:91:a9:6c:c6:21:c4:cd:e2:
fc:9a:07:92:f6:53:6f:de:74:5f:75:d1:e8:bc:3b:
56:b5:10:a6:bb:7d:b4:41:33:80:7a:d0:75:61:9b:
fb:a5:c5:a5:82:d9:bb:ad:03:cb:09:ef:ed:ca:cf:
1e:81:d6:58:ad:c3:b0:66:1e:f9:a2:80:d8:00:87:
2e:cf:fe:9b:9d:bf:d3:11:c5:0a:fa:69:b3:1e:86:
e2:c2:e4:c7:87:25:0b:18:99:ee:54:6e:20:4d:a7:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.64.0/18
46.45.128.0/18
77.75.32.0/21
79.98.128.0/21
94.101.80.0/20
176.53.0.0/17
178.211.32.0/19
185.25.100.0/22
185.157.40.0/22
185.184.208.0/22
213.128.64.0/19
IPv6:
2a00:56a0::/32
2a01:790::/32
2a0b:5f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42926
Signature Algorithm: sha256WithRSAEncryption
90:65:b7:92:e4:62:d4:ea:04:dd:c3:6a:63:c6:c1:fb:40:49:
d0:fd:09:6b:4a:f9:0d:a0:b9:04:d1:9b:24:53:8c:63:58:97:
6b:12:fe:9b:a4:4a:bf:2b:70:73:8b:36:55:7d:80:57:ec:7c:
16:38:f3:62:8a:11:36:e8:be:c7:bd:28:f7:0a:2e:b9:c6:a1:
1b:b6:2c:6d:4d:1d:96:de:c5:b1:5d:11:13:4f:4f:2e:0f:08:
1d:15:5a:27:dc:e0:7a:3b:22:62:bc:5e:41:42:10:7d:9d:84:
5f:cf:22:4a:94:34:60:b7:fe:4a:cb:75:07:ce:69:31:b0:8a:
37:d1:1d:46:d7:cb:7c:99:cb:cf:2b:45:f6:c1:ad:68:dd:0d:
85:91:93:a8:d6:ea:7b:f1:ce:64:2a:dd:c3:d5:fa:d4:62:01:
fa:aa:08:8b:60:6f:bb:3d:dd:1e:5d:a4:e1:78:f9:76:4f:69:
2b:ff:36:94:5b:4a:a6:91:a2:3c:8a:56:89:2d:c2:09:24:da:
ef:ab:0e:e3:fe:c5:21:11:6d:8f:b4:5a:66:ff:50:c5:51:b5:
4b:4d:6a:59:de:31:c1:d8:ac:b5:0a:e1:da:39:96:20:31:a3:
be:a0:20:2a:c1:d2:d3:91:14:27:15:c1:f1:d5:a1:d8:27:4b:
6f:b0:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:53:36 2024 by rpki-client on console-fra.rpki-client.org