Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer (raw, json)
Hash identifier: vf9qscvqw69d20igjnIJ8GcJWFFQES5yuHKsDMGjP2c=
Subject key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E48AF7EFD5742603B321A2DD5EDE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31708
IP: 31.193.168.0/21
IP: 62.197.40.0/23
IP: 62.197.44.0/23
IP: 62.197.50.0/23
IP: 83.142.24.0/21
IP: 85.13.192.0/18
IP: 89.187.64.0/19
IP: 109.70.136.0/21
IP: 185.101.80.0/22
IP: 193.26.222.0/24
IP: 2a01:c0::/32
IP: 2a06:1bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:48:af:7e:fd:57:42:60:3b:32:1a:2d:d5:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:ab:f6:a9:b0:d1:e0:65:05:e9:95:a6:2e:
4b:59:d4:40:a8:69:7e:ec:bc:e9:57:f0:6a:02:8d:
e1:34:3e:da:4e:5f:e6:9b:71:e8:b6:94:6b:fb:e9:
ad:e3:c1:a7:cd:47:a6:cc:b1:32:a5:8f:c5:86:3b:
80:36:0b:81:4c:5a:d1:a3:5f:c0:c2:84:d6:44:3c:
31:75:93:e7:44:c7:0b:05:93:a1:f2:9d:a6:ae:cd:
67:46:d9:f3:26:03:24:0a:b5:26:2e:a5:71:9a:f8:
21:b3:f7:ba:51:6d:3b:35:02:a2:1d:b6:38:7f:91:
ba:d9:d5:15:d2:9c:8f:0e:a4:57:d3:c9:b7:64:8b:
ae:7b:8e:4d:2a:24:66:61:ab:f4:38:89:fb:ae:9e:
28:4c:c5:df:76:fb:cb:91:a1:61:b4:16:7b:52:ae:
7f:0a:ff:c7:44:87:9c:1f:75:12:74:b6:ce:ad:5a:
ea:69:99:b7:c5:46:93:d8:bb:21:08:1f:e6:a8:61:
ab:66:6e:5e:a7:94:a2:e5:80:15:e5:cd:74:0c:18:
60:4d:b8:d3:1d:29:6c:97:f4:e5:e4:b4:fd:3e:45:
6f:c0:f4:a1:17:7d:1a:b9:7a:db:e7:17:53:1c:c0:
4b:b5:79:6c:48:f1:61:87:df:e9:5d:34:00:28:82:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.168.0/21
62.197.40.0/23
62.197.44.0/23
62.197.50.0/23
83.142.24.0/21
85.13.192.0/18
89.187.64.0/19
109.70.136.0/21
185.101.80.0/22
193.26.222.0/24
IPv6:
2a01:c0::/32
2a06:1bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31708
Signature Algorithm: sha256WithRSAEncryption
5e:6e:8b:f5:e5:07:ac:09:5b:5a:ac:52:1c:46:ee:60:66:a6:
ec:b2:96:08:00:39:d9:2a:ae:67:c4:5c:79:9c:91:88:24:c2:
c8:95:44:13:c8:11:9c:32:5d:36:85:3a:aa:71:18:a1:c6:b1:
a4:11:30:e8:32:4c:8e:f7:b1:54:c8:98:4d:b4:7a:39:d1:c4:
ef:6f:40:fe:3b:c8:74:39:46:a1:dd:f4:78:83:ac:bb:1c:df:
f7:f4:eb:07:c9:f5:69:23:af:09:1d:5a:b3:7d:75:bb:de:77:
24:15:35:ab:84:b5:6a:e3:80:91:44:42:20:33:89:41:79:0f:
26:c4:ac:18:bb:9d:c5:68:42:33:b6:4e:0a:16:be:0d:a9:f8:
e9:1f:7f:55:f5:2b:64:2e:d2:b4:49:43:f2:c5:68:1d:33:c2:
a2:0a:59:d4:ec:e1:c4:bc:a0:a7:37:e0:83:a3:2b:94:6b:26:
d9:0f:3c:1a:df:48:46:32:39:7c:b9:f1:ab:85:e8:ff:0e:7a:
21:1c:92:89:96:7a:d5:ec:44:d2:71:90:d1:e6:f7:f4:54:3b:
35:46:64:9a:e6:8d:30:9d:bb:de:03:8f:a3:3a:eb:1a:83:2c:
3a:8b:9c:eb:12:69:91:0b:0e:4f:27:64:6d:24:0d:b9:f7:2b:
00:5d:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:00 2024 by rpki-client on console-fra.rpki-client.org