Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
File: D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer (raw, json)
Hash identifier: 0WCAxO1x7HrT7y+lkpu2pGzOPLDsH8PUhjpwywS3En0=
Subject key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649F5AA821F40E7A39B326DE5D69E01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42807
AS: 206227
IP: 5.253.140.0/22
IP: 31.207.80.0/21
IP: 37.230.104.0/21
IP: 88.218.128.0/22
IP: 92.119.76.0/22
IP: 94.199.200.0/21
IP: 109.232.216.0/21
IP: 141.98.204.0/22
IP: 152.89.36.0/22
IP: 171.22.184.0/22
IP: 178.157.8.0/21
IP: 185.15.40.0/22
IP: 185.99.196.0/22
IP: 213.159.0.0/21
IP: 213.159.28.0/22
IP: 2a03:adc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f5:aa:82:1f:40:e7:a3:9b:32:6d:e5:d6:9e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:24:23:1e:48:2a:4a:54:1e:69:b1:73:76:
64:5a:76:e6:40:66:f8:3c:71:c5:04:ca:0a:ff:66:
00:2f:c8:54:42:c9:11:c4:4b:8c:72:9d:9a:27:e9:
6c:51:62:3d:57:b7:54:11:2c:8d:6d:92:be:8f:02:
c1:6d:fc:1a:a6:5c:fe:24:d3:21:b5:0e:ba:51:0b:
23:e0:2a:90:7e:57:00:be:6f:35:5b:d7:8e:65:20:
4b:3e:30:86:64:1f:80:ce:c5:73:71:b0:7e:21:ca:
91:49:e0:39:09:f3:b7:8e:9c:52:83:fe:dc:b7:df:
f3:91:7f:3a:27:1b:f2:19:ca:df:2c:3d:90:a5:b5:
e4:04:5e:ba:0c:d3:6f:eb:d3:3c:74:c1:f6:c0:da:
77:1d:ad:fc:bd:34:56:75:68:21:cd:a2:05:ed:e4:
6a:c9:2b:f0:0d:8c:48:ff:1a:fc:a9:ff:94:0d:b1:
db:b7:6c:63:28:fb:ce:22:f6:1f:85:d6:e7:8f:b3:
06:b8:6a:34:bd:0f:27:ce:3c:ad:75:05:ec:9b:3e:
30:4e:c7:bd:a9:03:29:e7:dc:48:36:43:ca:e7:07:
ed:c8:44:e3:ec:90:ba:cd:2d:f4:bc:a7:91:12:2c:
23:7e:e1:3b:19:7d:02:40:8c:1f:4a:9c:78:25:77:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.140.0/22
31.207.80.0/21
37.230.104.0/21
88.218.128.0/22
92.119.76.0/22
94.199.200.0/21
109.232.216.0/21
141.98.204.0/22
152.89.36.0/22
171.22.184.0/22
178.157.8.0/21
185.15.40.0/22
185.99.196.0/22
213.159.0.0/21
213.159.28.0/22
IPv6:
2a03:adc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42807
206227
Signature Algorithm: sha256WithRSAEncryption
17:03:a8:35:d5:22:d0:e4:cb:31:40:fc:26:ef:ab:a5:05:39:
51:4d:41:93:f2:a9:ae:9d:a2:bd:19:db:6e:83:70:0a:a8:79:
ad:c7:54:5a:cc:49:10:d2:90:26:fd:8d:d0:ed:71:5c:f3:f1:
25:1c:10:e7:cb:4c:b2:68:38:3d:63:dd:98:83:70:b1:4e:f0:
0c:dc:15:86:cb:19:25:cc:0f:a2:32:53:13:7f:8d:10:fd:4a:
9c:8a:c4:36:a6:a0:93:8a:b9:bf:f4:94:d6:a3:be:3d:3d:d2:
58:ab:36:9b:8b:0b:3f:8a:61:45:7a:e1:b2:ca:9a:e1:ab:36:
a2:b9:ba:0c:3c:db:5f:d1:9d:df:ce:28:3a:7d:4a:0f:da:b1:
e1:08:3e:29:b8:f2:5b:2a:36:98:f1:97:88:d8:63:3f:50:31:
f5:be:e6:09:43:f2:e7:ef:7e:86:2f:ea:d7:3e:4b:2a:90:68:
51:3c:5a:cc:84:a6:fb:76:5d:cf:7d:26:e3:b2:c3:93:98:c6:
9c:b4:fb:a2:dd:df:1f:6e:79:43:ab:6a:4f:f9:ed:87:91:11:
30:6d:a7:24:10:03:48:94:e4:23:a5:ba:22:3f:19:0d:01:da:
78:75:79:34:c9:30:70:b3:65:7c:18:01:93:4d:f3:e1:20:6a:
66:e3:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:06 2024 by rpki-client on console-fra.rpki-client.org