Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer (raw, json)
Hash identifier: qAayYNzqbYGnKm3URYk5PjMSAT7Y481pjq/UAHnrzFg=
Subject key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D0F2DCED718823A23924DF5C1F67B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34878
AS: 58069
AS: 204680
AS: 212674
AS: 213068
IP: 129.13.0.0/16
IP: 141.3.0.0/16
IP: 141.52.0.0/16
IP: 157.180.228.0 -- 157.180.235.255
IP: 185.1.189.0/24
IP: 185.237.152.0/22
IP: 192.108.45.0 -- 192.108.47.255
IP: 192.108.68.0/24
IP: 2001:678:da0::/48
IP: 2001:678:da4::/48
IP: 2001:678:da8::/48
IP: 2001:678:dac::/48
IP: 2001:7f8:103::/48
IP: 2a00:1398::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0f:2d:ce:d7:18:82:3a:23:92:4d:f5:c1:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eb1788fe220e46434692d1cc437072d792d7888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:f0:ec:d6:2c:50:df:a4:b5:1e:6f:ad:9e:
13:93:c2:51:44:34:35:8a:39:a3:9d:96:3a:4b:27:
59:59:56:1d:a2:4c:9c:05:46:9d:56:18:73:67:c5:
4e:cb:42:77:31:33:28:25:81:f7:c5:37:10:d3:89:
c0:16:1e:b1:f5:87:10:07:ef:ba:42:72:60:4c:25:
55:5e:12:ee:90:b9:77:88:0d:d4:cc:7b:44:a7:c4:
7b:17:be:67:33:83:ae:0e:f8:db:8d:23:0a:f9:b9:
80:b0:8d:14:d8:d8:6a:58:eb:18:1e:fb:8c:b0:e3:
23:62:35:f5:07:a5:7d:b0:07:0f:a8:87:f5:94:93:
66:aa:26:42:03:b8:65:df:6a:56:44:e4:cb:d4:b8:
87:bd:fb:68:3c:7b:4e:1c:06:f7:5a:1d:5e:be:cb:
4d:3b:69:31:15:41:db:6d:e6:e6:d0:63:dd:01:fb:
9f:be:58:a8:90:a7:17:ef:5c:39:24:ac:31:8e:eb:
8f:59:29:0a:a1:4e:bd:6d:91:ee:bf:ad:e0:55:fd:
02:9b:d7:f4:f9:09:71:78:ac:c1:f3:fd:46:35:fa:
60:fd:f8:ab:db:96:80:ab:6f:f3:ee:89:56:67:00:
90:82:10:5a:54:22:6c:58:22:c5:df:fb:2f:8e:43:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.13.0.0/16
141.3.0.0/16
141.52.0.0/16
157.180.228.0-157.180.235.255
185.1.189.0/24
185.237.152.0/22
192.108.45.0-192.108.47.255
192.108.68.0/24
IPv6:
2001:678:da0::/48
2001:678:da4::/48
2001:678:da8::/48
2001:678:dac::/48
2001:7f8:103::/48
2a00:1398::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34878
58069
204680
212674
213068
Signature Algorithm: sha256WithRSAEncryption
05:f1:4e:48:91:d1:eb:30:98:59:39:43:d9:33:ee:14:a9:f8:
70:8e:d8:23:af:37:f7:fb:d0:3b:6b:08:93:74:67:29:c1:34:
19:32:40:b4:b0:b3:3d:bd:85:61:2a:2b:de:7c:3e:b1:bd:e3:
eb:5f:43:f5:b4:27:28:63:74:e2:70:54:55:5c:f6:67:57:a2:
e8:61:9c:ed:3b:36:31:14:02:52:44:a0:fb:fd:3a:1d:10:f8:
c3:1c:ab:f8:df:86:9b:71:a2:df:59:99:50:ab:25:8c:61:ea:
48:89:37:ce:51:1d:db:fb:74:24:c8:85:e3:90:dc:67:58:db:
e2:9b:69:3d:e1:4a:b6:4a:30:69:ec:94:5d:fd:ae:a7:a2:03:
c1:a6:72:95:f8:d4:76:b9:62:63:4a:36:96:eb:85:f1:d6:30:
56:0b:fe:b3:6a:ff:71:29:da:31:33:49:68:94:ae:f8:59:16:
36:5e:d6:5c:98:54:a3:fa:d4:d9:b2:1b:d3:84:89:65:43:c1:
f9:d7:48:6e:27:c3:19:f4:12:97:43:89:ec:85:7c:c8:ef:a0:
0f:55:03:10:5e:70:2e:32:df:c6:68:71:53:ac:ce:6b:bd:e1:
f8:c8:17:0d:a8:e8:20:c8:9d:7a:3e:54:a7:31:fd:f2:54:da:
df:b9:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:59:15 2024 by rpki-client on console-ams.rpki-client.org