Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JrvteI4p-EBrK9yN3e631OxLgz4.cer
File: JrvteI4p-EBrK9yN3e631OxLgz4.cer (raw, json)
Hash identifier: /r5vmKiSxNVu9JLocXGlfeyv88UgG5RlIWsDVavDIpk=
Subject key identifier: 26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E2CD6C47EDFB221606E1A6FE1F52C3C0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/JrvteI4p-EBrK9yN3e631OxLgz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Mar 2024 09:27:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43205
IP: 37.143.192.0/18
IP: 46.40.64.0/18
IP: 46.47.64.0/18
IP: 46.237.64.0/18
IP: 78.128.2.0/23
IP: 78.128.10.0 -- 78.128.31.255
IP: 78.128.36.0 -- 78.128.41.255
IP: 78.128.52.0 -- 78.128.59.255
IP: 78.128.74.0/23
IP: 78.128.82.0 -- 78.128.91.255
IP: 78.128.96.0/23
IP: 78.128.100.0 -- 78.128.107.255
IP: 78.128.115.0 -- 78.128.117.255
IP: 78.128.120.0/22
IP: 78.142.9.0 -- 78.142.15.255
IP: 78.142.30.0/23
IP: 91.139.128.0/17
IP: 91.148.149.0 -- 91.148.159.255
IP: 91.148.162.0 -- 91.148.166.255
IP: 91.148.169.0 -- 91.148.183.255
IP: 91.148.186.0/23
IP: 93.155.128.0/17
IP: 109.121.192.0/18
IP: 158.58.192.0/18
IP: 178.169.128.0/17
IP: 185.4.80.0/22
IP: 188.254.128.0/17
IP: 193.24.240.0/22
IP: 193.200.14.0/23
IP: 194.145.160.0/22
IP: 212.43.32.0/19
IP: 212.75.0.0/19
IP: 213.214.64.0/19
IP: 2a02:6800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:d6:c4:7e:df:b2:21:60:6e:1a:6f:e1:f5:2c:3c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 09:27:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26bbed788e29f8406b2bdc8dddeeb7d4ec4b833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:f0:70:61:e5:cc:fb:d4:07:04:fe:89:5d:
5a:78:a0:ee:ce:ba:cd:ad:13:1a:a9:99:b2:f3:2f:
58:78:c8:fb:0f:20:3e:0f:ea:f3:55:09:33:b4:6c:
76:81:83:00:a9:84:cd:e2:fa:5d:91:e4:8e:fd:dc:
27:ef:68:c6:0c:be:6b:37:43:dd:1f:0f:e3:6d:bd:
20:fa:11:65:e9:49:3b:24:d8:ea:b1:b2:99:c8:29:
12:7f:72:e1:22:16:df:1c:7c:ba:c8:3d:f9:56:1f:
4c:ab:9a:c1:eb:a0:4e:70:79:08:3f:b6:13:3d:1e:
17:3d:48:63:7e:5b:0c:db:a3:48:88:6c:ad:55:3e:
2e:ab:45:c0:a5:ae:96:55:19:7b:b3:2e:43:9e:32:
4b:eb:cf:e7:7f:87:19:4e:d2:bc:4f:c2:ef:06:a8:
74:18:d2:c9:f5:22:be:40:45:92:bd:5d:3b:16:90:
cd:01:18:ea:86:67:34:db:a2:b2:ff:45:b9:55:2c:
84:00:75:04:b0:34:f7:8b:bd:0f:20:ce:2c:47:63:
cf:63:ff:23:03:33:9e:d3:d5:18:24:c7:da:52:a9:
03:4e:5a:57:0a:c6:44:9c:cf:7b:32:dd:85:1b:9a:
d2:e1:3d:23:33:9d:a8:18:8a:80:e7:cf:12:12:51:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/JrvteI4p-EBrK9yN3e631OxLgz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.192.0/18
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.74.0/23
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.115.0-78.128.117.255
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.30.0/23
91.139.128.0/17
91.148.149.0-91.148.159.255
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
93.155.128.0/17
109.121.192.0/18
158.58.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
193.24.240.0/22
193.200.14.0/23
194.145.160.0/22
212.43.32.0/19
212.75.0.0/19
213.214.64.0/19
IPv6:
2a02:6800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43205
Signature Algorithm: sha256WithRSAEncryption
38:78:48:6e:95:81:80:34:8b:ce:57:42:ce:d7:eb:61:40:48:
36:7b:5f:0e:3f:8a:fc:e4:40:6b:74:2a:92:19:da:51:45:8d:
98:e2:7b:9f:68:2d:4c:36:d0:ba:48:f1:84:a9:d1:aa:3d:db:
15:ad:9a:3f:05:22:dc:71:79:84:30:07:4a:08:1e:ee:d9:d3:
58:b6:e1:7a:38:b7:75:51:7a:62:d2:bc:01:e5:f8:15:43:4a:
f6:d1:d4:e0:97:d0:8c:39:e6:a3:32:bd:38:d7:e6:91:3a:68:
43:45:2c:dd:68:8a:75:2e:e9:f5:62:fe:01:68:1f:a8:ac:6c:
d3:6f:93:4a:bb:95:c3:9a:a0:d8:e1:93:f4:1d:36:ae:f1:4a:
0a:bf:28:ad:19:47:a8:27:91:f5:1e:0e:41:48:b2:96:df:1a:
aa:b8:a3:f6:18:8b:24:d9:0f:b0:65:41:94:e3:30:30:92:b2:
39:a1:bc:d5:34:b4:6c:9d:7e:70:78:7a:94:ee:4a:3f:14:33:
5b:67:0b:31:37:0c:f9:62:19:9f:06:6b:32:1f:32:90:85:d4:
ed:65:5b:19:1b:18:4e:90:fd:0e:fa:1e:31:bc:3a:71:55:0b:
95:e5:d7:e0:63:c8:0d:0d:7b:99:9a:53:4a:61:3b:14:1e:c9:
17:cb:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:12 2024 by rpki-client on console-fra.rpki-client.org