Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.cer (raw, json)
Hash identifier: di61Ui8AD4Hh+MLjINPnzOvaaJuc62EucriaLCYbuGI=
Subject key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492E012FEAB617405DFA17482AEA4BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.11.232.0/22
IP: 45.91.188.0/22
IP: 45.142.52.0/22
IP: 45.147.60.0/22
IP: 45.153.236.0/22
IP: 77.83.44.0/22
IP: 77.83.68.0/22
IP: 80.76.36.0/22
IP: 84.252.84.0/22
IP: 95.214.100.0/22
IP: 171.22.188.0/22
IP: 185.15.176.0/22
IP: 185.164.64.0/22
IP: 193.36.124.0/22
IP: 194.110.88.0/22
IP: 212.81.40.0/22
IP: 2a0f:4cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e0:12:fe:ab:61:74:05:df:a1:74:82:ae:a4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:43:2b:62:6f:4a:40:9c:79:c5:f6:83:0d:
0a:31:38:a5:72:33:4f:d6:16:26:2f:ee:2f:2a:6c:
21:d4:86:31:37:62:d6:30:69:6f:bb:14:79:50:0b:
ac:f8:26:f8:6e:ec:0d:27:78:47:6f:06:fc:3b:e0:
10:73:7a:5d:d5:d3:97:d9:77:49:75:21:fe:7d:76:
fb:6a:0b:b4:8f:6d:3e:37:f1:96:98:b8:eb:06:06:
47:9b:65:b5:d6:ed:59:1d:c9:4d:fb:d5:18:1c:b8:
3f:cd:db:c3:28:ef:89:8b:38:f2:f4:af:85:7d:bb:
28:01:88:20:2f:da:95:26:8d:c7:3f:da:40:3b:29:
4a:d2:ca:03:84:3a:8e:80:42:9a:05:f7:c4:57:88:
98:12:3e:be:e5:da:d1:a7:1e:87:6e:29:72:19:e1:
d8:ed:95:9c:8b:d1:e5:18:54:12:9c:37:9a:d8:48:
cd:fe:61:46:15:7c:b4:ff:5b:d5:33:c3:12:eb:2f:
84:0d:83:19:6c:9d:70:89:83:0d:bb:59:e3:ce:d0:
9f:15:ae:6c:f4:71:0d:25:5f:55:44:4e:5e:7d:3b:
7d:9d:6d:b6:f6:e6:09:5b:8e:6e:8c:5e:e8:e7:b8:
ae:2b:a5:ad:5e:f8:b2:be:31:4c:3e:fa:91:ca:6f:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/22
45.91.188.0/22
45.142.52.0/22
45.147.60.0/22
45.153.236.0/22
77.83.44.0/22
77.83.68.0/22
80.76.36.0/22
84.252.84.0/22
95.214.100.0/22
171.22.188.0/22
185.15.176.0/22
185.164.64.0/22
193.36.124.0/22
194.110.88.0/22
212.81.40.0/22
IPv6:
2a0f:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:83:17:98:b7:a7:41:37:25:04:42:80:0f:31:02:c3:8d:ab:
5a:1d:9c:d8:d3:e8:75:51:d5:f8:46:b3:3c:95:8d:94:6c:bd:
c4:fb:f0:ab:d2:6c:71:f8:ae:9f:cb:0b:a8:8c:69:7c:17:29:
9b:c4:b6:e8:81:c0:f8:75:b1:81:23:35:80:f2:5d:d3:54:20:
dd:e1:e7:a2:67:48:ae:22:48:8f:93:78:14:5c:96:31:c4:52:
c2:66:d0:1c:8f:8c:e6:e7:28:c9:ca:82:96:5a:df:38:53:42:
5f:c4:31:35:75:6d:f9:28:dc:37:a3:80:45:ed:81:25:09:7a:
54:a0:17:f1:95:20:37:af:79:55:f8:6c:a5:b3:fb:0f:41:db:
94:4f:e6:76:f7:b2:84:92:df:0f:8d:25:60:1f:65:25:98:84:
2d:d3:81:2c:69:85:5b:4c:d6:e0:86:d0:ca:b5:46:6c:55:12:
7f:c1:e5:b5:75:61:1b:a9:71:5c:53:3e:7a:4d:6a:3f:35:6e:
f4:ad:31:8b:4b:3f:93:e7:0c:ec:e0:37:64:bb:15:4a:78:76:
c2:fd:57:0e:4b:43:50:86:6a:54:d3:7c:23:c1:1e:67:85:cb:
35:8b:ac:22:10:79:23:a6:ca:74:13:a6:94:af:f7:96:52:66:
01:63:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:21:49 2024 by rpki-client on console-ams.rpki-client.org