Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer (raw, json)
Hash identifier: KLAkY6pNfoDTfqrWZxN9GPjsxoi/ZsY1F76P/BvaXOc=
Subject key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4E5297591FEA1578710C6A4D10D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213038
IP: 31.220.151.0/24
IP: 89.36.197.0/24
IP: 89.40.170.0/24
IP: 89.42.24.0/24
IP: 103.95.116.0/22
IP: 185.145.252.0/22
IP: 2a0e:9980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4e:52:97:59:1f:ea:15:78:71:0c:6a:4d:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:e9:df:f7:ce:ef:14:80:b9:f1:6d:d9:73:
46:71:d0:3b:dc:01:a4:f3:31:3a:38:75:2a:54:c7:
fe:86:62:d3:b7:bd:7f:9d:2c:86:5d:ce:05:47:d3:
8e:90:a6:bd:de:4f:52:b0:10:14:70:ae:91:d0:32:
32:51:65:7a:6b:e1:ff:7a:3b:ff:8d:63:75:c3:9a:
ca:69:65:e6:35:2f:3e:d5:62:ec:be:bd:a9:d3:3d:
42:bf:97:1e:57:cb:bc:58:77:c9:fb:18:45:22:62:
1f:24:d9:fb:b1:5c:14:c7:c7:b8:92:4a:9e:98:85:
2d:5a:82:51:4e:a7:52:cc:15:a7:fe:a3:56:80:52:
34:12:ef:af:ad:5e:52:04:cf:68:4a:f6:6c:dc:52:
6c:94:ff:a9:a4:16:10:26:40:f4:bd:70:84:17:79:
e3:da:b6:00:ef:5a:a7:ff:e9:c2:a4:0b:34:84:48:
0f:d8:06:b7:03:18:13:74:5a:2a:2f:ec:10:5c:3f:
35:6d:a6:b0:89:79:9b:13:60:28:ef:fb:e9:32:7d:
9c:0e:5d:91:f0:06:51:f9:1d:21:f2:d1:43:ea:3b:
17:58:7b:8a:f0:2c:07:d5:2d:70:8e:9e:af:4a:c7:
bf:ae:fb:5d:8c:a4:0c:9d:18:d9:91:9a:13:4e:58:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.151.0/24
89.36.197.0/24
89.40.170.0/24
89.42.24.0/24
103.95.116.0/22
185.145.252.0/22
IPv6:
2a0e:9980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213038
Signature Algorithm: sha256WithRSAEncryption
0d:ee:a2:47:b6:6b:3a:e9:5d:d8:52:ca:24:0e:c2:c7:6d:a7:
fa:cd:de:55:b9:d2:1e:23:37:46:cf:ba:72:f0:a9:cb:73:4e:
7d:08:75:05:05:a3:85:7c:e9:e4:21:99:31:b1:26:a3:9a:3e:
96:d5:b5:06:f9:b9:76:ca:97:bf:5c:ba:05:6f:73:d2:c5:48:
06:70:3f:12:f7:ff:80:c3:60:09:a0:e7:c4:97:c9:c1:04:d9:
c5:7d:89:9d:35:5b:89:48:da:c9:e9:9d:24:38:09:b4:33:1c:
db:72:16:02:27:41:f4:4c:b8:c5:12:44:44:9a:03:96:c2:b2:
0e:c2:c4:20:dc:a3:c7:60:7c:c3:37:44:dd:a1:66:ea:fc:34:
0d:64:ea:f3:9b:37:f4:c4:0b:94:20:29:f6:90:ed:4e:a9:0e:
75:3a:e1:33:79:d9:66:30:77:38:65:a4:1f:bb:da:c9:c9:91:
38:9f:43:19:d1:8c:bc:f9:03:58:63:8e:d4:88:07:95:d2:80:
f6:d9:51:02:39:36:fc:49:f5:c6:38:27:51:60:67:90:3c:24:
0f:8c:0d:9d:01:d5:00:a9:30:f8:0d:c5:70:50:54:ae:e0:56:
8b:42:7a:64:a5:13:48:a4:db:44:a5:5a:f4:37:1c:e9:3b:ae:
cc:f1:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:17 2024 by rpki-client on console-ams.rpki-client.org