Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.cer (raw, json)
Hash identifier: VNzWJLFxgvK5r4idWypQYCFVGGmM1nmzzZzHh2eQl+A=
Subject key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B703415BB72ED22060B51A62E9A51B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5391
AS: 35648
IP: 31.216.192.0/19
IP: 31.217.0.0/17
IP: 46.188.128.0/17
IP: 78.0.0.0/14
IP: 83.131.0.0/16
IP: 87.252.128.0/19
IP: 89.172.0.0/16
IP: 93.136.0.0/13
IP: 93.159.64.0/19
IP: 178.160.0.0/17
IP: 188.125.0.0/19
IP: 194.152.192.0/18
IP: 195.29.0.0/16
IP: 2a00:c30::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:03:41:5b:b7:2e:d2:20:60:b5:1a:62:e9:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:82:12:ef:22:44:5f:d3:d4:4b:fb:65:fb:
9e:31:a8:30:08:12:1f:84:e7:77:79:8d:27:37:1f:
7f:81:eb:0b:c7:d7:41:39:86:f3:0f:01:0a:dc:33:
9f:1a:ef:8c:32:82:c9:ed:1b:5c:2e:50:88:7e:cc:
b0:4b:56:62:aa:d9:6f:28:d9:58:48:9a:11:76:f9:
d9:1b:65:3d:50:08:41:0c:ef:ad:4b:e2:34:ba:5b:
32:f1:46:11:18:5f:96:69:b0:1a:01:1a:d3:80:95:
d0:04:69:58:99:d6:33:a5:c4:7a:55:d9:fc:ac:29:
b5:69:06:86:46:e0:23:1c:dd:64:97:21:93:04:f5:
1e:cf:e3:68:92:22:50:4c:01:ce:8c:73:9f:38:2f:
8a:4f:eb:a1:67:bc:45:ce:b3:33:24:c6:a9:64:a7:
e3:b2:8a:9f:a8:00:f3:14:36:3c:f8:51:ee:a2:b1:
bb:95:43:72:88:f2:b0:fb:79:3b:22:9b:6d:3f:2a:
5c:73:76:ab:c7:54:f7:78:55:8e:04:60:7f:28:59:
c9:0c:73:de:ba:4d:4e:0a:11:22:b3:5b:1b:61:fa:
08:2c:ea:d9:df:b5:f6:18:87:a9:99:eb:74:cb:53:
8c:f6:2b:d3:6a:22:cc:61:ed:6e:18:9c:31:8d:84:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.192.0/19
31.217.0.0/17
46.188.128.0/17
78.0.0.0/14
83.131.0.0/16
87.252.128.0/19
89.172.0.0/16
93.136.0.0/13
93.159.64.0/19
178.160.0.0/17
188.125.0.0/19
194.152.192.0/18
195.29.0.0/16
IPv6:
2a00:c30::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5391
35648
Signature Algorithm: sha256WithRSAEncryption
3a:66:3a:87:42:b7:82:6b:fc:7f:ea:bc:41:fc:bc:82:9f:4d:
38:8e:57:69:6d:c9:4c:56:9c:b2:5b:1c:ae:79:f2:f3:62:e7:
3d:84:d8:60:c7:aa:65:33:d7:fd:1a:7f:a9:ab:ec:05:47:f2:
05:49:f5:97:a9:35:56:db:be:8c:1a:65:1a:d7:f7:f8:11:04:
d6:c8:cf:0c:07:8c:8b:46:ea:90:60:8d:cf:23:e9:3c:ec:4e:
8d:9a:e5:0f:5f:1b:dc:82:2e:1b:93:80:80:18:de:5b:c7:bc:
63:65:97:dd:6d:e7:df:8c:9f:ba:95:ae:9d:88:5e:d7:49:2d:
28:b6:07:9b:04:07:89:95:17:d7:aa:21:29:24:bf:38:d4:21:
18:4c:f7:c5:08:64:ca:a4:b1:d8:e6:69:a3:63:46:2d:fe:ee:
f3:e2:4d:eb:d9:c6:21:11:1f:6b:0a:26:f0:1d:07:f3:7e:60:
18:f6:b4:60:19:98:17:06:a6:a6:4c:85:a6:43:75:73:23:f5:
5c:42:7a:68:05:c2:a1:67:73:6c:27:89:16:47:9e:8c:21:3e:
9c:e9:b3:14:fa:ba:c4:88:fc:b9:bb:b1:de:8c:e7:04:a9:e0:
13:37:94:50:48:0e:f6:97:bc:81:69:96:d5:f5:d4:3e:d5:8f:
7f:32:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:20:17 2024 by rpki-client on console-fra.rpki-client.org