Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
File: Fi5IMpyL6O8gnplY2marAkAUXhk.cer (raw, json)
Hash identifier: EkDY8pKH1ZNmwFIgxskP0oRA0DhPt4AFx1cs/blJLII=
Subject key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019127E26E2FD4D2DF27A245D28BCD4FB8BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Aug 2024 13:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57795
IP: 23.249.232.0/21
IP: 37.114.88.0/21
IP: 64.26.32.0/20
IP: 83.174.128.0/20
IP: 93.92.24.0/21
IP: 149.143.0.0/19
IP: 185.6.204.0/22
IP: 185.34.176.0/22
IP: 185.37.64.0/22
IP: 185.43.212.0/22
IP: 185.144.20.0/22
IP: 185.221.156.0/22
IP: 185.254.41.0 -- 185.254.43.255
IP: 2a00:9340::/29
IP: 2a00:f5e0::/32
IP: 2a07:36c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:e2:6e:2f:d4:d2:df:27:a2:45:d2:8b:cd:4f:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 13:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162e48329c8be8ef209e9958da66ab0240145e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:ed:4b:a2:22:58:c3:9b:f9:a3:01:ad:3d:
df:46:25:f8:ec:3d:1a:c0:ea:04:d3:45:8b:d3:61:
b9:31:e6:91:c9:96:8e:f4:0e:44:68:29:e6:0b:8f:
40:47:ed:82:33:96:88:d5:b3:f9:8c:66:24:05:76:
41:d3:ad:3b:95:f3:b9:6d:7b:1c:06:06:20:c7:99:
e7:d4:dc:c7:38:53:66:1c:de:cf:c4:7b:e3:c0:a7:
60:7e:04:86:33:b5:af:20:77:bc:f8:4a:04:e4:af:
7b:af:c3:73:42:d5:eb:bf:80:4f:64:a0:fa:15:2c:
47:8e:cd:b2:6d:46:9c:a7:f7:4a:bd:91:57:e3:33:
5b:9c:ff:bb:cb:2b:cf:42:cc:86:33:22:85:82:e8:
64:da:45:89:97:3a:fe:26:a7:61:b6:6d:5f:3f:97:
da:11:19:8b:c7:1a:2f:c8:22:7d:bc:2c:d7:65:e2:
2b:e3:66:ff:c5:91:a8:b1:20:21:85:c8:87:98:57:
b8:35:22:bf:6a:a8:1a:c5:0a:36:2d:df:57:91:a9:
d0:eb:00:fc:5c:70:9f:bb:a9:e7:02:24:f9:f7:06:
77:89:7d:9a:e0:04:ea:b4:83:2b:80:34:14:92:1d:
7c:25:b3:6c:1c:20:f8:9a:05:06:f7:d1:eb:52:98:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.232.0/21
37.114.88.0/21
64.26.32.0/20
83.174.128.0/20
93.92.24.0/21
149.143.0.0/19
185.6.204.0/22
185.34.176.0/22
185.37.64.0/22
185.43.212.0/22
185.144.20.0/22
185.221.156.0/22
185.254.41.0-185.254.43.255
IPv6:
2a00:9340::/29
2a00:f5e0::/32
2a07:36c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57795
Signature Algorithm: sha256WithRSAEncryption
83:27:e0:d9:e7:39:18:d8:8b:be:44:45:73:1b:45:73:2b:d5:
93:ea:63:94:7d:52:b4:9b:27:34:55:a5:52:d2:29:82:27:7b:
7d:b4:2c:e7:cc:5d:5e:93:93:bc:fd:4d:33:64:ba:54:2e:86:
c2:a1:00:f2:50:66:d2:7e:9e:77:29:2d:f1:fc:19:e1:3a:a2:
9d:00:ab:50:e7:29:bc:5e:36:c8:8c:15:7f:aa:8b:4f:2e:a4:
2e:b0:f1:ed:bb:34:cb:cb:b8:f3:93:6f:40:00:53:d6:99:b1:
d8:81:3f:fd:8a:3a:f5:46:35:47:a2:f8:87:33:c9:c4:73:12:
1d:98:f1:1d:58:31:97:a7:6f:f2:37:40:40:f2:18:0c:36:9d:
45:b1:7b:74:39:37:a4:b2:b9:4b:0f:55:f4:7e:32:c9:4b:f6:
0e:9d:12:55:3f:31:5b:24:27:31:01:22:88:36:3e:dd:b9:7b:
8c:72:a3:c4:0d:58:61:44:b9:1f:8c:58:4e:92:f1:79:97:b3:
6a:01:38:02:42:9a:3a:ad:16:ff:b0:71:f5:dd:4d:84:b1:1e:
5b:b5:5f:c1:6d:ac:25:ce:2e:a4:e6:b6:39:ac:05:ab:2e:e9:
19:8f:eb:4f:79:41:8b:b8:b9:a6:54:17:94:fe:de:85:91:f3:
8c:ad:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:25 2024 by rpki-client on console-ams.rpki-client.org