Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
File: IvNEpj3LcOiQV9644nYdxFFliBo.cer (raw, json)
Hash identifier: B9EHCw9SydH4vfz/VT7lwnjppWxwHwEvAHtAGRB4hk4=
Subject key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793617084A8A9F568795BD25D317CE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31643
IP: 85.28.0.0/18
IP: 109.238.192.0/20
IP: 194.31.156.0/22
IP: 217.151.16.0/20
IP: 2a09:680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:61:70:84:a8:a9:f5:68:79:5b:d2:5d:31:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:2f:60:a1:ec:2f:f6:a0:73:15:f1:33:b4:
a9:8c:5c:85:2d:1a:76:c3:3f:f9:ae:c5:b4:16:43:
cf:88:35:c7:ac:aa:99:dd:a4:50:e1:a0:87:90:cc:
6d:3d:ce:4c:91:07:33:8b:a5:23:68:9e:73:0d:58:
2b:b3:da:3d:57:a1:27:f2:19:6b:e5:32:de:83:40:
9b:e8:60:a3:b3:e6:8f:7e:13:ec:78:b4:a3:9b:6d:
e7:63:d8:c7:49:fb:7a:7f:2b:9a:62:6e:f9:7b:3c:
2f:8f:9a:82:c2:13:e7:fe:b6:ca:75:cd:c2:bb:38:
8a:92:f5:9b:1d:32:0a:2a:90:9b:a4:35:30:3c:48:
58:cf:04:2a:40:fc:d1:d2:8d:eb:8f:a1:b8:87:01:
59:4e:cb:eb:b7:65:8e:7d:b3:26:0b:d1:44:bd:54:
31:75:e1:6b:06:11:7f:58:65:76:b2:64:6b:48:bd:
b9:8b:83:2d:04:5f:b6:87:e1:7a:a3:35:51:b3:f6:
48:88:e9:83:ac:9d:4e:cd:c5:a8:05:43:9c:f4:82:
ff:c4:04:cc:c2:80:88:6b:29:e8:42:f3:83:16:aa:
ad:cf:16:78:70:21:f5:a0:08:6b:31:01:71:ec:f7:
0d:69:d8:bc:4a:ba:30:bc:92:f8:80:fd:b0:43:47:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.0.0/18
109.238.192.0/20
194.31.156.0/22
217.151.16.0/20
IPv6:
2a09:680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31643
Signature Algorithm: sha256WithRSAEncryption
84:32:06:26:b0:af:9a:c0:76:c9:d3:b9:69:5d:dd:f9:5c:fd:
a2:81:a3:45:76:9a:cc:8f:16:58:b3:1a:77:ca:24:ac:0f:c9:
ee:5d:72:73:f3:b8:88:3b:dc:61:ee:bb:d3:eb:c7:2f:8f:76:
88:b4:00:87:f4:b2:21:a5:cf:27:26:ba:47:93:b0:06:2d:7e:
f0:2e:9b:5d:a2:57:2c:6e:8b:37:35:ab:ff:e8:06:6b:db:42:
bd:23:fb:ff:92:4a:ae:66:46:03:f5:89:47:f0:ee:39:ac:81:
ba:65:50:97:9d:57:db:83:0e:a6:3e:ee:69:14:03:84:cd:cd:
ea:59:0f:42:18:ab:27:fb:bb:4b:df:7e:ed:65:34:9b:05:93:
2e:e4:46:44:9d:0c:ea:b8:26:12:d8:b8:2c:c5:6a:37:58:1a:
2d:b8:6e:64:99:f4:10:3c:a4:06:ff:4a:2b:18:46:39:44:97:
73:68:73:ec:3e:04:e8:32:b2:65:41:66:ab:ee:c7:99:f8:e1:
f7:7b:74:9f:7a:d6:1f:9c:c6:c4:f5:e5:81:7c:93:7a:77:02:
ce:62:11:22:ce:12:e7:d7:fb:20:e3:41:64:8c:bc:7f:23:f2:
55:89:c3:b9:ec:26:49:7c:1d:19:3c:18:24:90:44:00:3b:2a:
54:78:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 21:04:42 2024 by rpki-client on console-fra.rpki-client.org