Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer (raw, json)
Hash identifier: P224fdYbaIXaQHYAz4UH5dX2A0mRb8l0vF47qq5xV78=
Subject key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726CF1067FE84D3EDDD7FF3F819AE46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28738
IP: 78.153.128.0 -- 78.153.136.255
IP: 78.153.139.0 -- 78.153.146.255
IP: 78.153.148.0 -- 78.153.159.255
IP: 109.237.96.0/21
IP: 109.237.105.0 -- 109.237.111.255
IP: 2a01:adc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 22:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:cf:10:67:fe:84:d3:ed:dd:7f:f3:f8:19:ae:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22a44566764ebb511683cb6228fa91997b559379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:36:3b:af:a9:14:c3:80:2b:65:d1:0c:78:
c1:2c:5a:2b:4e:8f:8e:be:92:27:62:e1:e6:2e:77:
a2:fd:bd:68:3b:e1:4d:ee:51:83:3f:ee:91:be:f9:
27:04:3b:63:fa:c1:66:82:1b:fe:49:ab:02:b9:a8:
01:82:c4:1a:0e:21:09:5a:06:3a:b9:91:d2:ba:93:
10:82:4e:36:e3:5e:e1:8f:cc:20:2d:fb:7f:99:c8:
72:50:4f:f9:b2:36:dd:0c:23:dc:63:9f:22:c1:07:
89:75:f3:5d:97:be:86:d3:e1:5b:fc:1d:c2:47:99:
9e:71:ff:24:4c:24:0d:f2:1b:60:e7:7d:90:26:a9:
ab:02:04:ce:28:20:ae:9f:d1:ce:34:1a:ce:8e:71:
72:3d:a4:c9:a4:1e:4b:9a:af:39:1e:a0:d4:89:ee:
47:e7:11:cf:c3:ec:ee:b4:29:be:13:d7:14:e8:01:
22:84:8b:dd:bf:51:b2:ef:95:2f:27:64:f0:14:04:
e2:84:d7:4f:72:6f:75:eb:3e:76:6d:d1:2c:4d:8d:
e9:04:49:a8:3b:56:5f:99:47:6e:cb:99:0d:58:74:
68:9f:fe:73:42:23:61:43:46:65:b3:94:3d:28:1a:
fc:1b:af:4c:f1:6c:eb:a3:9d:cd:63:4d:30:b0:2c:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.128.0-78.153.136.255
78.153.139.0-78.153.146.255
78.153.148.0-78.153.159.255
109.237.96.0/21
109.237.105.0-109.237.111.255
IPv6:
2a01:adc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28738
Signature Algorithm: sha256WithRSAEncryption
61:0e:52:b8:75:f8:98:d9:3e:ee:f0:52:fb:87:7d:30:6b:b3:
00:02:1f:46:31:c0:9f:9f:cb:3d:81:26:33:0a:76:29:28:4e:
04:22:53:67:9b:0c:a3:22:bb:d3:22:31:3d:a9:ac:55:e0:ac:
8d:1b:28:f7:6a:5e:bf:e8:db:66:27:1b:51:c3:44:c8:03:c9:
de:df:39:e9:9f:9c:aa:05:83:8c:3a:7d:ea:8b:90:76:3c:ab:
1f:16:17:25:ff:b5:38:5a:be:95:ff:29:47:24:f2:cc:d6:bf:
3b:1a:4e:ad:14:c9:cc:4e:36:b1:f8:87:46:28:ff:c5:07:04:
f3:06:a6:75:04:c1:75:0a:68:df:f6:50:19:84:2a:79:84:a2:
0f:98:6a:57:b7:68:53:a6:d0:05:2b:41:77:99:32:08:06:4c:
0b:43:82:c9:86:68:4e:79:0f:06:d1:2b:b4:2e:fc:26:13:65:
b0:9c:87:b3:bd:f2:a4:8c:40:1c:1b:d6:5a:e1:6a:58:19:bf:
ed:0e:d6:4a:a4:e9:52:47:16:5c:d2:cb:94:f6:f8:62:e9:57:
ba:be:19:a9:ba:92:d0:3e:9a:65:ca:2e:28:1d:c3:c6:9a:ce:
4a:ef:5a:44:bf:0a:66:94:66:af:a3:e9:a8:9d:41:74:54:d8:
d3:bd:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 00:53:05 2024 by rpki-client on console-fra.rpki-client.org