Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer (raw, json)
Hash identifier: meSglU0cwkEtWFzm67V/kQSdTSah54tsGbMSBkYDMg0=
Subject key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72709D0B7BC50285D0FCAC85DE3A5B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44218
AS: 44516
AS: 49209
IP: 5.10.136.0/21
IP: 5.154.128.0/19
IP: 79.139.0.0/20
IP: 81.173.16.0/20
IP: 87.120.16.0/20
IP: 95.130.192.0/21
IP: 145.14.64.0/19
IP: 185.75.172.0/22
IP: 2a04:f580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:09:d0:b7:bc:50:28:5d:0f:ca:c8:5d:e3:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:1a:f7:12:10:15:af:55:55:56:2c:44:a4:
98:6a:51:ea:a5:60:c3:58:8d:08:7d:13:28:d9:12:
4c:7e:93:30:20:c1:51:dd:2c:16:e1:1c:f8:78:ee:
dd:42:5a:9b:ba:5f:43:56:db:ff:ad:84:5e:90:1c:
15:b0:ad:cd:01:92:fb:49:c2:fe:fe:0b:b3:6b:2a:
b1:4b:7f:f5:dd:29:b7:72:fe:b7:67:dc:90:13:28:
9f:18:f4:5d:d5:e2:5d:f2:42:15:d2:a2:31:5b:4d:
12:4d:2a:05:12:09:39:ce:fd:77:f1:45:e6:98:e2:
5e:6b:a4:b0:91:da:0d:a1:e2:7d:4b:6e:09:c1:bc:
c8:e8:b9:a1:9b:46:c9:3f:5b:9a:95:1c:59:55:92:
05:83:3b:48:4b:a6:bf:cb:7c:8d:64:f2:81:05:8e:
be:4a:e4:17:a9:b7:d0:23:b2:4d:38:b8:8c:a2:00:
18:f2:e4:aa:fa:bc:2f:34:da:b4:6d:0a:83:50:6b:
20:2b:36:65:fb:99:1e:50:37:b9:5e:1d:20:b5:77:
a2:30:2d:91:e7:03:32:ed:1b:91:d0:71:38:6e:b3:
66:27:bf:7b:33:66:4f:ab:29:29:81:98:2d:aa:c4:
ad:d0:8e:ac:5e:9e:d4:bd:62:7b:9f:a0:8c:34:2a:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0/21
5.154.128.0/19
79.139.0.0/20
81.173.16.0/20
87.120.16.0/20
95.130.192.0/21
145.14.64.0/19
185.75.172.0/22
IPv6:
2a04:f580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44218
44516
49209
Signature Algorithm: sha256WithRSAEncryption
8b:05:35:b5:35:4b:c7:bd:a6:81:2a:9e:19:5e:89:c8:81:15:
36:bc:76:b0:4e:e8:5d:26:a6:54:53:07:e7:d4:3d:20:1e:19:
d2:2e:fa:6b:9c:32:7d:1b:35:38:94:51:98:0d:d3:1e:c5:b4:
ca:02:21:83:6d:4c:21:fd:3c:f8:db:e0:41:63:c2:3d:f2:75:
6c:bd:93:9a:8b:75:da:51:cc:4b:af:30:44:1f:bf:d4:43:39:
39:81:9a:01:20:70:b6:c0:e0:cf:6a:6c:62:ec:1e:a5:65:b1:
c9:6c:83:75:5d:7d:6e:6f:23:94:4c:f4:67:08:a0:95:fc:a8:
23:b1:a4:7e:61:be:df:24:ee:f3:d4:fd:02:9c:bc:96:56:b9:
21:a4:bc:d5:09:54:e8:04:5d:3c:0b:0b:84:68:a7:f8:b3:99:
7d:58:48:4d:e9:d1:87:f5:f3:19:ef:d8:54:ff:ab:45:77:4a:
55:32:41:78:61:c6:27:c6:db:26:3b:dd:14:78:e4:49:69:8d:
a3:27:de:0c:4c:1e:33:e4:cf:af:f9:3b:38:3d:f8:02:36:95:
4e:5c:90:eb:35:2c:38:04:9f:5f:e1:3a:6f:ad:72:d3:51:33:
d8:34:d3:b9:8a:f9:d5:88:fd:1c:a2:7b:e7:2a:b7:69:85:c7:
4e:8a:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:32:27 2024 by rpki-client on console-ams.rpki-client.org