Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.cer (raw, json)
Hash identifier: iU5AWlGc08UjMB0DJR6AeAno/wfLSPNxPaybXLK3r70=
Subject key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E40140170BC09D246BA0B44FC317A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8674
AS: 20943
AS: 29216
AS: 39840
AS: 39870 -- 39871
AS: 42381
AS: 52005
AS: 56908
AS: 57021
AS: 59758
IP: 77.72.224.0/21
IP: 185.1.230.0/24
IP: 185.42.136.0/22
IP: 194.58.192.0/20
IP: 194.146.105.0 -- 194.146.108.255
IP: 195.69.116.0/22
IP: 195.245.240.0/24
IP: 212.237.192.0/21
IP: 213.32.232.0/21
IP: 2001:67c:1010::/47
IP: 2001:67c:254c::/48
IP: 2001:67c:2550::/48
IP: 2001:67c:2554::/48
IP: 2001:67c:2558::/48
IP: 2001:7f8:d::/48
IP: 2001:7f8:122::/48
IP: 2001:7fe::/32
IP: 2a01:3f0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:40:14:01:70:bc:09:d2:46:ba:0b:44:fc:31:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bac82804700ad36538bf86f34c073e971430da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:bb:04:6c:0c:b7:48:62:f3:66:a4:14:49:
94:d0:77:6b:ed:0d:14:24:1e:5c:86:da:6c:e9:0c:
4e:69:01:e5:0f:da:aa:ea:6f:2b:f1:84:6a:fe:b5:
13:24:15:74:c0:81:54:9e:85:f2:f0:5d:58:3e:65:
4b:1d:88:09:e8:b5:70:67:df:51:4d:0d:ad:72:ff:
5e:62:3a:8a:d3:46:7a:52:b5:8e:03:ff:11:78:70:
40:be:90:34:1f:9b:36:8d:78:59:68:8a:5e:a6:71:
8f:dd:d0:73:9d:36:1f:67:c9:b2:de:74:61:95:f6:
3f:45:be:37:a7:c5:8c:7a:69:67:2c:52:81:46:0d:
f1:7e:5f:a5:9b:e8:47:d5:7a:d8:95:d9:f3:ff:48:
30:2b:a1:e2:82:07:d9:17:50:92:1a:6a:1d:4c:f5:
d6:b6:e0:42:10:bd:89:9a:8e:86:7b:34:98:46:7c:
84:bc:e0:4b:2a:36:40:f0:12:3c:82:81:3c:72:03:
8f:0f:72:ff:de:f7:1f:88:a5:7a:5f:8e:5d:ce:6a:
57:80:76:4c:55:2f:a4:b9:fd:14:b7:8f:c5:6c:fe:
e6:3e:03:38:0c:e8:0b:9d:e0:f7:cd:48:cb:6e:7d:
38:d5:c0:6c:28:b2:4f:c3:c1:85:6a:43:9e:e6:c3:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
185.1.230.0/24
185.42.136.0/22
194.58.192.0/20
194.146.105.0-194.146.108.255
195.69.116.0/22
195.245.240.0/24
212.237.192.0/21
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2001:67c:254c::/48
2001:67c:2550::/48
2001:67c:2554::/48
2001:67c:2558::/48
2001:7f8:d::/48
2001:7f8:122::/48
2001:7fe::/32
2a01:3f0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8674
20943
29216
39840
39870-39871
42381
52005
56908
57021
59758
Signature Algorithm: sha256WithRSAEncryption
7c:74:56:d6:5f:9b:bd:3c:2c:7c:18:f9:a9:ea:31:b6:28:31:
fb:5a:ce:60:9c:1c:d7:0d:4e:ee:50:1a:e7:7c:c4:42:5c:c9:
e7:5d:23:ff:51:21:3f:64:d2:95:8e:ee:b2:d1:c7:30:e5:71:
5e:5a:86:40:3f:36:23:10:12:e9:03:36:64:71:a3:78:cb:6e:
d0:b9:0a:04:36:15:59:ae:6e:ae:e1:80:e8:2d:10:40:88:eb:
9c:c4:3a:1d:ee:78:cb:41:e7:06:79:6b:63:52:53:11:f7:9c:
50:b5:be:ae:95:bc:3d:45:a8:60:a9:ac:f7:bb:f8:b8:59:0b:
50:e5:0e:7b:c4:0a:b6:8e:e1:d1:ae:03:32:4e:9a:1d:23:fe:
81:11:9e:5f:13:3a:05:0a:31:ca:6d:7d:09:0a:44:f3:95:4e:
4d:cf:77:f5:a0:79:ce:83:7a:92:f1:af:bd:a4:d4:b8:66:87:
e5:e3:3e:ac:d6:36:42:52:e2:a1:86:b8:4f:dd:3f:37:3a:bb:
6c:a0:6f:21:75:4d:50:f4:52:fa:f2:62:86:c3:4e:a2:72:1f:
cf:c4:7f:ba:36:06:bf:20:d0:03:e5:db:bf:b3:3f:4c:98:32:
c3:93:57:8f:c8:05:18:29:7c:56:fc:f9:b9:2a:fe:a4:5b:a2:
a8:25:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:08 2024 by rpki-client on console-fra.rpki-client.org