Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
File: O94s1SFek7-gym34ssH17SyUr3Q.cer (raw, json)
Hash identifier: UOnRwWgIt8zLO5hNmUsChBBTClMxguAtR/BGQF1Drfc=
Subject key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D9838CAE50C3A985E3D3FBF361FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.112.128.0/18
IP: 80.114.128.0/18
IP: 80.115.224.0/19
IP: 80.242.224.0/19
IP: 91.195.160.0/23
IP: 91.198.151.0/24
IP: 91.221.96.0/23
IP: 91.236.83.0/24
IP: 185.130.172.0/22
IP: 194.0.250.0/24
IP: 194.30.188.0/24
IP: 195.35.128.0/17
IP: 195.85.128.0/18
IP: 212.178.64.0 -- 212.178.159.255
IP: 212.178.192.0/19
IP: 212.203.0.0/19
IP: 213.34.64.0/19
IP: 213.34.160.0/19
IP: 213.124.0.0 -- 213.124.159.255
IP: 213.125.0.0 -- 213.126.127.255
IP: 213.132.160.0/19
IP: 217.100.0.0/16
IP: 217.102.224.0/20
IP: 217.105.192.0/19
IP: 2001:41f0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:98:38:ca:e5:0c:3a:98:5e:3d:3f:bf:36:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:ed:df:ca:3d:9e:e0:91:9a:bc:99:58:ba:
93:b9:7e:92:62:83:32:a7:2e:d5:e4:82:d0:bb:3e:
26:82:1d:c9:13:c2:91:34:7a:90:53:81:04:e9:58:
00:c5:b0:b1:67:92:d1:8c:3f:5a:72:00:a0:15:1c:
60:a7:3b:18:56:09:71:25:e8:8a:ed:2d:93:bf:46:
9e:1c:14:5e:48:80:8b:24:03:8e:ff:d7:fc:11:78:
a9:c0:96:6a:71:da:93:cb:a1:c4:66:d0:35:f5:f0:
e9:1e:f7:59:2b:bf:10:b9:ef:80:dc:ad:0e:46:1e:
9f:c4:a4:b5:f0:1e:78:b1:ce:4b:b8:34:76:88:ec:
78:95:be:07:f7:ff:89:9b:50:87:79:2a:86:1b:42:
65:1e:52:47:ce:2c:82:89:bd:f0:f5:ec:98:c5:f8:
ac:f6:55:63:03:77:00:f9:4c:d8:e3:d5:c3:37:c2:
5c:cd:58:8b:4c:5e:44:f0:28:38:19:bf:56:ae:b3:
d0:26:69:70:f1:54:28:65:7a:c7:a3:93:e6:b1:3e:
75:9e:f5:38:f0:0c:ad:3b:94:63:d0:b5:ee:b6:37:
0a:0e:df:27:84:57:b1:2a:25:10:f5:6f:89:59:a8:
4c:7d:b6:d9:52:fb:93:3d:b6:24:59:ab:62:d4:2b:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.195.160.0/23
91.198.151.0/24
91.221.96.0/23
91.236.83.0/24
185.130.172.0/22
194.0.250.0/24
194.30.188.0/24
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/20
217.105.192.0/19
IPv6:
2001:41f0::/29
Signature Algorithm: sha256WithRSAEncryption
28:d8:09:63:b1:d3:d5:03:26:65:15:dc:b7:49:6d:a1:0f:16:
2a:8b:dc:02:7f:bb:f3:26:53:9f:88:f3:cb:ab:50:09:bb:34:
14:eb:05:d7:ea:1a:5b:04:2f:9f:45:40:32:37:08:4e:83:06:
44:99:9a:3d:8f:b7:35:1c:3f:31:29:12:e1:a1:02:4d:e2:d8:
a1:84:4d:f4:f2:9e:02:c2:d7:f4:5c:05:9d:ef:d9:ec:4a:58:
3c:01:f9:98:cf:99:11:3d:1b:a1:e4:96:f5:76:ee:2b:94:97:
96:48:6c:17:db:70:76:bf:df:52:7c:99:de:b0:0f:dd:c3:2b:
41:b1:ba:56:f3:7b:63:12:11:d2:fa:53:4b:96:d2:65:e6:f9:
eb:c4:1d:4e:e4:0b:50:31:b9:a5:96:1f:6a:f8:13:9c:6a:87:
1e:f0:0d:2b:65:11:40:b2:d4:55:fb:60:a7:34:fa:60:08:d8:
2d:90:54:46:7c:47:d9:11:dd:7c:66:77:d1:7a:0b:20:1e:e2:
55:84:af:0f:c5:91:65:ff:ec:98:fd:c4:41:60:5c:97:1a:bc:
1d:5d:6c:69:66:40:ac:e2:1e:2f:95:a3:e9:10:51:d2:0e:20:
e6:36:de:f3:0d:09:cf:6a:0a:8c:61:36:e2:b6:11:15:72:7d:
1b:7f:7c:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 07:31:37 2024 by rpki-client on console-fra.rpki-client.org