Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
File: TVg7b1bPCSco3lk62VKuoZzjGIY.cer (raw, json)
Hash identifier: J27mVuXQK1MzJyhMEbsPFWwxuDXGVkOG1/1q+H0QFi8=
Subject key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7D87B8F333C13995FD1BE57E2A961
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210298
IP: 37.9.184.0/21
IP: 88.214.12.0/22
IP: 95.156.197.0/24
IP: 95.156.200.0 -- 95.156.202.255
IP: 95.156.214.0/23
IP: 109.230.201.0 -- 109.230.202.255
IP: 185.119.32.0/22
IP: 2a02:2dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d8:7b:8f:33:3c:13:99:5f:d1:be:57:e2:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d583b6f56cf092728de593ad952aea19ce31886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:ab:c4:16:b4:19:e7:9b:d5:7d:b7:9a:74:
5b:00:1e:3d:70:7d:60:34:eb:b2:8f:41:e9:5d:f2:
15:9a:75:b0:f2:3f:db:25:e4:5b:54:30:d6:77:9d:
26:d6:8e:8f:6c:26:35:65:44:19:73:4e:e1:3b:95:
7f:a5:a4:17:35:a5:f0:d2:da:f5:bb:2f:33:67:a9:
44:e7:87:5b:7b:ae:8e:f2:0c:7c:74:3f:eb:b7:52:
4e:29:86:da:36:8c:f6:76:e9:02:d6:39:ba:6f:9c:
5e:e1:f2:0b:31:97:3a:04:d2:0b:30:18:67:98:c6:
88:41:aa:1f:fa:26:0d:12:24:f1:30:31:ef:72:99:
51:8c:8d:8f:86:db:59:a8:70:2f:77:7b:70:2e:d4:
7f:a6:01:3b:fc:80:62:32:d4:1f:13:a2:1e:f5:de:
cb:21:51:b1:d5:44:3d:ba:f0:f9:08:c1:e6:54:3e:
da:81:ec:3c:8b:23:67:12:dc:9e:1b:4b:3c:54:f2:
aa:c2:c5:c5:f6:7a:74:6f:f8:d8:3d:ba:95:ec:d8:
77:ba:3d:e4:3d:99:6c:c3:e2:2c:69:db:4d:c1:36:
91:67:dd:48:d3:91:b1:d9:42:09:a4:56:00:bf:47:
d8:5d:7a:fd:0b:af:73:2e:36:62:7d:34:69:d6:6f:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.184.0/21
88.214.12.0/22
95.156.197.0/24
95.156.200.0-95.156.202.255
95.156.214.0/23
109.230.201.0-109.230.202.255
185.119.32.0/22
IPv6:
2a02:2dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210298
Signature Algorithm: sha256WithRSAEncryption
09:ce:93:36:f8:cf:05:1e:82:24:6b:a3:fe:6d:3e:2d:b6:1c:
a8:4e:05:3d:fa:ba:32:88:49:fc:8c:1c:44:e7:70:d1:73:2d:
c6:21:71:a8:50:f6:17:4d:31:a4:29:bf:22:06:0f:39:f3:59:
cf:25:39:87:62:6d:1d:0d:53:c1:b3:57:92:51:02:91:cf:24:
13:ec:1c:0b:f0:05:b6:5c:1b:de:0c:b7:cb:5a:86:ac:da:e2:
92:f5:4f:72:2b:3d:1e:4c:d3:89:83:ce:f6:da:b2:fe:74:38:
17:0a:69:a7:6b:85:2c:18:e4:42:54:2a:81:9e:f0:c2:93:ac:
ef:63:35:a3:83:c6:c4:cf:64:2d:23:6c:e6:11:bd:05:86:31:
15:98:55:34:1b:ae:23:9e:af:69:7f:54:32:d4:10:c9:c2:ad:
8d:31:88:01:01:90:b8:c0:4a:58:05:95:d8:78:56:13:83:c2:
9a:bc:93:4e:21:29:b7:10:7b:9e:a7:dd:45:b8:d9:2c:45:35:
84:65:4a:64:15:65:bd:b4:62:3e:91:9b:ea:7e:2b:c1:68:36:
a3:87:72:48:85:85:d9:32:37:85:97:cf:ef:4c:cd:20:13:65:
7b:f9:f6:0d:d6:7c:e6:7b:14:c7:4b:47:72:b4:fe:55:d7:7e:
0e:68:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:01:37 2024 by rpki-client on console-ams.rpki-client.org