Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
File: T2F9awPi_l-JEcvrX64tyjvWZ38.cer (raw, json)
Hash identifier: XQgduUxWLszUc4yPXcgj/ksKR/Rux9lTNXmLrCnAE1M=
Subject key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E066C6496952D64A3C31232CC2EB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44034
IP: 2.64.0.0/13
IP: 37.250.0.0/16
IP: 77.241.128.0/20
IP: 78.156.192.0/19
IP: 79.138.128.0/17
IP: 80.251.192.0/20
IP: 94.191.128.0/17
IP: 95.209.0.0/16
IP: 109.56.0.0/14
IP: 212.27.0.0/19
IP: 2a02:aa0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:06:6c:64:96:95:2d:64:a3:c3:12:32:cc:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:19:16:b7:80:e6:71:22:c9:62:34:19:5c:
48:be:cc:6d:39:53:5e:b3:ce:19:dd:5c:f4:94:19:
c8:d9:4d:87:48:df:59:6a:1e:f8:1e:17:ef:0f:bf:
e4:0b:a7:d8:07:d7:06:c0:72:69:99:d5:06:04:b8:
4b:32:30:19:c1:90:db:87:7d:0b:86:ac:07:f2:41:
82:9e:68:ca:58:2b:57:15:2d:97:b0:5d:64:98:9a:
de:02:21:e2:22:b7:4c:42:c0:ea:23:5e:5d:6a:ef:
1b:8f:2a:ba:e0:ba:18:56:12:29:87:f3:e5:98:91:
d4:da:7e:af:78:54:c8:84:6e:16:c5:f0:09:4b:ea:
0f:78:b8:f2:46:ed:8a:f8:46:1e:b6:53:24:94:e9:
0e:4c:fe:fb:90:65:e2:4d:f3:07:a6:18:32:6f:b2:
4b:47:52:f9:ce:6a:c7:b8:14:ef:f8:19:a9:b4:97:
2b:9f:e0:4b:15:94:df:19:8a:3f:6c:22:7e:73:20:
a3:67:98:df:db:12:71:32:d3:e1:d0:96:4d:13:d2:
11:ff:f3:5d:d5:b6:68:b4:ec:59:ab:61:38:d9:8a:
42:4f:32:10:b6:4d:e5:b5:a1:a6:5b:4f:61:ba:23:
9e:0e:79:3d:32:9c:d0:d4:11:b4:ab:f2:15:31:57:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44034
Signature Algorithm: sha256WithRSAEncryption
3b:00:87:aa:04:ae:54:91:49:ed:1a:07:7a:95:6b:bc:c3:d1:
02:33:c6:16:d9:90:d7:09:a7:6e:87:07:22:a7:08:e3:43:96:
1f:a2:e5:0f:79:67:9e:03:c5:c4:df:ee:a0:77:32:c9:4c:b9:
b3:86:41:e6:4f:5e:d8:2c:a0:54:db:f4:57:85:51:6e:1f:1c:
67:60:a2:01:25:30:4b:57:39:14:c4:15:64:77:9b:eb:97:c7:
f0:bd:ed:ea:a6:0e:c2:43:cc:95:10:0c:0a:01:87:a6:5d:de:
60:da:96:93:87:a8:31:cb:df:2f:c9:f0:e5:c1:87:38:16:37:
44:3d:73:38:db:ab:20:10:a5:6f:ff:5d:20:1e:b2:92:9a:22:
98:6e:ec:e5:a8:67:b6:14:40:50:dd:28:17:59:eb:7c:b9:f1:
78:06:73:27:35:9b:ff:23:b5:b6:1f:22:6f:59:4b:d6:52:cc:
88:ca:47:f1:db:f3:63:25:60:e2:10:47:86:6a:19:a0:68:d8:
26:54:4d:35:ca:6d:66:b1:bb:b8:5e:b8:f0:63:0a:03:df:42:
c1:b7:9e:af:51:fd:56:90:31:3f:2a:78:23:fb:3a:72:a7:06:
64:ab:de:45:80:43:38:79:38:5f:d9:87:55:77:6e:3f:30:80:
64:d6:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:18:21 2024 by rpki-client on console-fra.rpki-client.org