Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
File: U1hROBB5ZcOJ82e1Wr15K1Meuco.cer (raw, json)
Hash identifier: dVJ30GSwMmzud2BWEdllV02Ou7k0lBmuoUyMABt54Zo=
Subject key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E605E82C105506733A14BF1B7AEF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41369
IP: 5.250.160.0/21
IP: 77.240.16.0/23
IP: 77.240.24.0/21
IP: 79.171.224.0/21
IP: 80.242.16.0/20
IP: 89.250.48.0/20
IP: 93.191.120.0/21
IP: 94.199.112.0/21
IP: 185.87.244.0/22
IP: 185.145.172.0/22
IP: 195.60.252.0/22
IP: 2a00:f5c0::/32
IP: 2a01:60c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:60:5e:82:c1:05:50:67:33:a1:4b:f1:b7:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53585138107965c389f367b55abd792b531eb9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:d8:59:46:5c:bb:8b:f2:0d:a4:ed:3b:c7:
74:d9:36:85:47:0f:89:4c:ef:01:3c:e0:80:06:8a:
9b:b1:9f:de:db:5e:47:3f:02:3f:55:0b:d6:96:e0:
7c:76:c3:61:d6:18:de:f9:d8:b7:14:64:f3:9b:ec:
d6:6b:d8:e9:e8:bf:76:a5:48:c8:30:56:95:25:c2:
60:f1:53:f1:00:94:1b:79:e3:2d:14:b8:eb:0a:84:
3e:51:21:2e:7a:17:92:62:11:95:54:ec:cb:57:8e:
e0:88:ae:4e:b5:48:80:9f:75:84:d4:c0:24:a0:3c:
61:8f:fb:79:fa:ed:2b:86:f5:c0:9f:30:c4:95:d4:
b8:a0:bb:c5:ff:62:3b:fd:34:bc:08:a5:1a:1f:99:
a8:32:56:1f:c0:14:b8:29:fa:47:4a:a3:ab:d7:f6:
e7:f1:c5:06:43:cc:a7:19:5a:1a:6c:94:1a:63:71:
15:23:5e:d3:d2:ad:38:24:9f:24:44:6b:ef:36:7e:
13:19:39:75:f3:4e:14:b6:3c:c9:a0:b0:f7:9a:64:
90:ed:c7:08:01:60:99:1f:1e:6f:fd:bc:b4:01:bc:
22:bd:6f:d9:15:b4:33:92:80:6d:0f:76:a3:b9:3d:
32:ed:85:d6:62:e5:e9:86:31:c5:be:87:a4:ff:0b:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.160.0/21
77.240.16.0/23
77.240.24.0/21
79.171.224.0/21
80.242.16.0/20
89.250.48.0/20
93.191.120.0/21
94.199.112.0/21
185.87.244.0/22
185.145.172.0/22
195.60.252.0/22
IPv6:
2a00:f5c0::/32
2a01:60c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41369
Signature Algorithm: sha256WithRSAEncryption
ad:b8:cb:ba:c9:23:2d:0f:a4:40:86:1f:48:bf:49:b7:56:f1:
d5:6a:4d:4f:b3:6d:ad:af:eb:e7:f3:c3:1f:45:af:3e:3a:fc:
21:38:34:b8:5a:00:80:fd:47:75:54:d0:3f:f7:f5:2c:74:15:
23:ca:d1:28:e8:fb:3d:57:30:e9:41:f9:88:62:e1:69:3e:c9:
ad:7d:30:14:5b:7c:7c:59:94:7b:69:a2:de:93:e0:03:c1:de:
2f:b2:f4:22:a8:90:01:76:1b:77:4c:10:33:b6:91:5a:6e:24:
58:2f:0b:bf:f6:31:54:14:68:eb:4a:9d:e5:52:bd:d8:21:54:
6a:4a:7f:d9:8c:4b:cf:82:8b:c7:9b:a3:8f:da:ce:74:a1:35:
07:35:82:9a:84:aa:e0:eb:c6:d8:cb:8b:87:1a:87:63:a3:94:
92:62:41:c5:27:00:f0:64:61:61:87:f5:4a:4a:da:86:8b:48:
14:7c:3f:4b:8d:68:cc:8c:42:bf:65:1b:21:e7:bd:49:d1:61:
09:86:7a:96:d4:4a:0f:60:93:48:65:14:04:38:af:ac:b3:90:
b7:db:a7:d3:a2:62:1d:02:d7:54:be:22:3c:32:c7:be:57:e6:
4f:e4:31:81:0b:05:7f:84:76:30:97:9a:0b:b8:75:9c:af:a6:
5d:ba:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:23 2024 by rpki-client on console-fra.rpki-client.org