Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer (raw, json)
Hash identifier: by8XWnGNUCqpJ1h/7ji1uNEf/VIZArRMiedhBMB6VcA=
Subject key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FBA156A45849BC6E46F56D406741EDE6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 May 2024 12:45:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50769
AS: 201978
AS: 208425
IP: 185.1.132.0/24
IP: 185.50.68.0/22
IP: 185.114.20.0/22
IP: 185.146.88.0/22
IP: 185.169.52.0/22
IP: 194.61.116.0/22
IP: 217.28.139.0/24
IP: 2001:7f8:ec::/48
IP: 2a01:a420::/29
IP: 2a0a:3900::/29
IP: 2a0f:d500::/29
IP: 2a12:3c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:15:6a:45:84:9b:c6:e4:6f:56:d4:06:74:1e:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 27 12:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:ef:56:48:bc:45:26:d3:ca:9f:2b:15:
95:af:53:ab:5c:dc:66:9e:c7:62:89:0f:73:5c:f2:
2b:85:ed:79:45:01:66:2e:59:14:f6:43:73:80:54:
2a:26:06:d1:fa:ab:43:cb:9f:d4:6a:cc:80:2f:00:
c0:ae:38:bd:88:ed:7e:dc:66:cd:bc:fd:47:76:00:
fc:f6:18:3e:43:d5:9f:13:05:59:01:de:0e:68:8c:
69:34:46:a4:79:c7:8b:a0:ef:52:4d:84:6b:16:5c:
bd:4f:85:89:c8:80:2d:6a:43:25:4d:a9:12:39:39:
a3:da:70:ed:ea:2e:3b:9b:6c:5e:15:02:39:c6:f5:
c5:e1:1a:d6:a2:6a:40:8e:65:0e:c1:b0:61:f4:af:
82:f1:b1:8f:15:f3:43:ac:78:df:d0:c8:a5:bb:e7:
e9:71:c3:48:22:fe:70:a8:61:73:5e:3d:2b:bd:d1:
ed:c3:8c:4b:a4:73:55:e1:a7:0e:3b:f2:62:b3:55:
bb:f5:5a:c0:58:13:9b:47:1f:a6:ab:e3:d3:29:6a:
a2:49:a8:d4:18:b9:fd:2e:72:9d:72:0d:ed:ac:37:
11:91:8d:36:8d:39:d9:f7:6f:3b:4e:76:74:1b:cf:
af:0c:f7:0d:23:9c:3d:75:32:f1:dd:86:05:ba:02:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
217.28.139.0/24
IPv6:
2001:7f8:ec::/48
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
2a12:3c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50769
201978
208425
Signature Algorithm: sha256WithRSAEncryption
23:96:6f:bd:c8:be:d0:5e:d1:4d:26:eb:42:93:72:29:86:1b:
01:80:c8:cd:90:95:6a:3f:ff:0d:72:dd:27:8e:28:71:d4:0e:
25:37:8d:58:a1:ff:f3:55:77:ec:17:2d:07:09:d9:e2:d4:81:
fd:72:01:5c:f6:5a:e8:60:0b:f7:d0:25:f4:0f:94:30:71:48:
0e:d0:ef:35:85:bf:f9:69:7b:a9:9b:5e:72:9b:8f:ca:a4:b6:
f9:44:c9:c3:d5:b5:2b:94:de:7f:6a:52:33:95:53:86:cd:10:
72:61:a0:e2:d3:82:f4:a3:da:2c:dd:e8:2c:8d:38:1e:d1:02:
70:7c:eb:6c:5a:c9:11:78:19:04:67:6d:32:7e:8c:9e:28:d0:
c8:9a:95:85:c1:84:7e:24:d8:54:7e:36:a6:2e:46:a0:46:bf:
a4:7b:76:d8:a7:17:9b:50:ca:75:19:44:08:72:89:39:c2:72:
f5:e1:92:d6:6b:3d:6c:72:78:7e:0e:4c:ad:39:84:8f:44:77:
1f:c6:38:ad:54:45:ff:91:1d:1c:b7:5c:e0:b8:ef:b6:7d:02:
9a:55:3d:25:0a:c5:09:f5:c3:c0:ed:28:68:9a:f6:42:3c:c1:
75:1b:57:fb:84:56:3c:31:ad:76:5b:47:92:f3:c7:db:3c:e2:
76:76:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:20 2024 by rpki-client on console-ams.rpki-client.org