Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer (raw, json)
Hash identifier: 1WkVy9qEH8QEquLXxWpPIIEM8BUufcrT5oAPeS5YoWU=
Subject key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348B6C623B493D31B179B200F735C19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35805
AS: 42082
IP: 5.152.0.0/17
IP: 31.146.0.0/16
IP: 37.110.160.0/19
IP: 37.232.0.0/17
IP: 77.92.224.0/19
IP: 79.99.248.0/21
IP: 87.253.32.0/19
IP: 91.151.128.0/20
IP: 92.54.192.0/18
IP: 94.43.0.0/16
IP: 146.255.224.0/19
IP: 149.3.0.0/17
IP: 176.221.128.0/17
IP: 178.134.0.0/16
IP: 185.146.176.0/22
IP: 188.123.128.0/19
IP: 188.169.0.0/16
IP: 213.217.16.0/22
IP: 2a01:9c80::/29
IP: 2a03:3580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b6:c6:23:b4:93:d3:1b:17:9b:20:0f:73:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:30:e5:8a:79:7a:8d:c5:ba:5d:d3:2d:bf:
2b:21:ce:75:17:2d:cb:0b:cf:4c:47:32:40:b5:f0:
c9:44:64:52:3a:f7:6f:eb:82:ee:79:f9:be:4b:eb:
cf:28:ed:93:2e:93:69:1c:9d:b8:36:3a:3e:d1:dc:
0f:08:44:b7:74:7a:5a:87:f6:5c:7d:74:72:9e:6f:
8d:5e:5a:10:0d:bf:b2:08:56:af:91:93:84:b1:d1:
09:d2:6c:e7:9b:de:63:8c:db:ff:92:1d:8b:a2:e0:
5f:39:38:33:ad:db:75:38:2a:a2:5d:4d:37:b4:ec:
fc:14:f6:6e:42:a9:d7:45:1f:74:ca:f1:cc:03:15:
e6:43:af:bf:ab:6a:cd:27:47:8e:1c:ed:29:92:61:
3c:72:66:31:82:25:e8:f5:a9:eb:9c:56:3e:48:ae:
fd:7a:b3:37:a8:34:fe:55:c4:71:fc:0f:44:e9:2a:
6a:91:95:9f:a9:06:d9:95:25:71:52:4d:eb:b6:0e:
c8:0e:d0:0a:45:58:53:41:01:e4:9a:97:8e:1a:07:
af:05:7b:54:de:04:52:fe:3b:6c:39:d3:be:32:eb:
c8:cf:b9:2c:e5:58:f1:dd:9a:e3:f8:83:c2:ed:0c:
da:c7:ee:b2:d8:0c:27:12:2a:3b:b3:60:90:87:41:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.0.0/17
31.146.0.0/16
37.110.160.0/19
37.232.0.0/17
77.92.224.0/19
79.99.248.0/21
87.253.32.0/19
91.151.128.0/20
92.54.192.0/18
94.43.0.0/16
146.255.224.0/19
149.3.0.0/17
176.221.128.0/17
178.134.0.0/16
185.146.176.0/22
188.123.128.0/19
188.169.0.0/16
213.217.16.0/22
IPv6:
2a01:9c80::/29
2a03:3580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35805
42082
Signature Algorithm: sha256WithRSAEncryption
3b:af:56:c4:85:27:ba:67:11:1f:b2:95:82:08:9d:86:a5:3e:
23:22:3f:91:e9:c5:36:29:98:88:9d:61:77:79:3a:bf:20:5c:
c0:0f:0e:b6:0d:0a:a3:93:bc:c1:37:0d:ec:40:c5:8f:26:f7:
08:82:b2:e7:52:16:97:4a:71:52:1a:97:51:31:c9:d2:3f:1c:
7d:32:53:b8:83:d4:40:39:d4:98:c5:d0:14:89:cf:4e:aa:44:
5c:cc:6b:bd:17:60:6e:cc:eb:87:89:09:a5:38:9a:b3:f1:03:
5d:bd:ed:f5:bf:26:34:22:26:13:39:88:82:70:8e:c5:03:8f:
04:98:bd:c9:16:91:e2:89:87:92:48:8e:bd:97:d9:61:26:2d:
46:0d:4b:54:b2:62:73:70:42:f8:ab:24:29:89:1e:16:10:67:
db:d8:30:d0:6c:0a:9c:5f:d8:91:81:5b:83:22:35:de:f2:53:
8d:4b:62:94:7e:4f:cf:7b:13:bd:05:00:2b:c3:4e:e2:79:46:
6a:af:7b:e5:e4:b3:65:11:70:3a:2e:45:e7:f8:ef:33:ae:c0:
11:ca:36:66:d0:ba:01:b5:f7:1b:de:8c:35:38:86:53:31:40:
7b:d7:6a:30:1b:cb:3c:f0:b1:54:38:be:e8:82:4e:c2:4b:a0:
d9:62:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:57 2024 by rpki-client on console-fra.rpki-client.org