Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer (raw, json)
Hash identifier: N1IJwrCaZTTK0DEl+5p/VpGtzBzzdsVhpMHveDoEPPs=
Subject key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F1AAA94F2047ED3E76C406B32287E3382
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Apr 2024 13:48:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.216.0/24
IP: 37.16.73.0/24
IP: 88.151.115.0/24
IP: 185.11.61.0/24
IP: 185.128.42.0/24
IP: 185.211.169.0/24
IP: 212.115.48.0/22
IP: 2a09:6900::/29
IP: 2a09:8b80::/29
IP: 2a0d:b9c0::/29
IP: 2a0d:f640::/29
IP: 2a0e:6740::/29
IP: 2a0e:8840::/29
IP: 2a0e:9180::/29
IP: 2a0e:c440::/29
IP: 2a0f:c00::/29
IP: 2a0f:72c0::/29
IP: 2a12:1240::/29
IP: 2a12:1a40::/29
IP: 2a12:2e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:aa:94:f2:04:7e:d3:e7:6c:40:6b:32:28:7e:33:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 13:48:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:84:1b:8c:4e:4e:00:d6:17:85:21:00:dd:
8c:c0:7c:53:d3:4a:4a:9d:d8:ad:c6:01:1c:e1:10:
a9:69:32:75:79:d0:b6:04:ac:92:17:1d:8e:67:38:
db:32:46:a0:af:20:87:3e:15:56:6b:5f:ec:cc:74:
15:15:be:1d:00:47:7c:09:3b:3d:09:be:68:73:eb:
dc:18:8d:d4:df:62:ee:de:bf:67:98:db:75:36:15:
ae:3d:8e:b3:3c:f1:de:00:c6:7e:e5:94:e3:f6:a1:
e7:37:09:a8:27:b4:c9:bd:b8:df:af:8b:28:57:dc:
22:8c:c5:36:94:fd:40:dc:00:b1:1c:97:56:5d:bf:
73:98:76:f0:51:e2:c9:95:16:51:95:7d:29:0e:02:
c2:3b:12:a5:bc:a8:7f:a2:66:a9:16:dc:e7:26:cf:
75:72:92:b7:93:7b:1e:de:42:f6:a1:09:28:75:01:
50:9b:ef:b3:36:6e:30:57:f4:f9:d1:bf:e9:b5:8d:
00:cc:0d:ea:6a:9a:8e:30:76:d3:69:3b:a1:34:58:
3e:d3:ee:05:21:db:d6:e2:56:cc:4b:7b:e7:9a:ed:
7f:f5:a1:eb:29:d9:f8:17:ad:9f:f7:39:d4:59:fc:
b8:8e:81:24:0f:72:d5:b4:29:e6:13:cb:97:53:ef:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.216.0/24
37.16.73.0/24
88.151.115.0/24
185.11.61.0/24
185.128.42.0/24
185.211.169.0/24
212.115.48.0/22
IPv6:
2a09:6900::/29
2a09:8b80::/29
2a0d:b9c0::/29
2a0d:f640::/29
2a0e:6740::/29
2a0e:8840::/29
2a0e:9180::/29
2a0e:c440::/29
2a0f:c00::/29
2a0f:72c0::/29
2a12:1240::/29
2a12:1a40::/29
2a12:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
b1:d9:3e:19:63:8b:35:ba:7a:0c:ab:eb:4d:ed:e9:8d:db:e8:
d9:e1:dc:98:07:ed:45:47:44:01:83:af:ae:42:ee:e4:92:f4:
eb:0c:22:a2:a7:70:6a:9d:19:46:fa:80:8b:e8:2a:f8:c8:5c:
d6:ef:a7:18:e1:e9:5e:a3:88:cb:8e:b8:75:bb:6b:d7:a3:69:
38:78:62:0b:3d:4a:9f:e4:8b:52:e7:65:d9:76:c0:33:1b:51:
32:3a:f3:cd:be:1f:05:34:44:fb:f6:b5:27:7b:a3:27:e4:d4:
e9:49:c0:7f:c1:73:9a:54:99:9c:6f:de:9d:c4:cf:22:a1:a7:
5c:f7:ee:5b:14:13:d1:63:24:41:c6:b6:e0:28:0e:11:44:8f:
66:18:31:07:a8:ee:68:70:6f:67:db:23:79:7b:4b:49:22:69:
51:8f:34:8f:ca:a2:d4:29:19:bd:83:07:65:c4:56:d8:75:37:
59:eb:c3:6c:98:00:25:eb:ce:4a:9e:46:b9:3d:a3:35:d6:62:
8f:7f:83:a1:a1:7a:c2:b1:34:3b:78:42:b9:03:e0:81:6c:25:
19:a6:72:a5:87:e6:69:b1:a2:0b:ad:c0:95:9b:d6:94:3f:9e:
41:e5:36:12:a4:f7:eb:e6:5a:8d:89:53:a2:40:66:33:37:d4:
7d:96:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:34 2024 by rpki-client on console-ams.rpki-client.org