Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
File: V0U31U828UIjG8gXA4hyy2B7Iec.cer (raw, json)
Hash identifier: T5lia28klzxYUwcwAqXMWLZ6FJrk6qbHy7beYEPCUo0=
Subject key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D701651B542FA1DC9A1755141731D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8843
AS: 15600
IP: 5.44.112.0/20
IP: 31.193.208.0/21
IP: 37.35.120.0/21
IP: 62.204.96.0/19
IP: 65.18.128.0/18
IP: 77.111.228.0/22
IP: 80.208.128.0/18
IP: 89.236.128.0/18
IP: 95.174.224.0/19
IP: 109.106.44.0 -- 109.106.63.255
IP: 138.248.48.0/20
IP: 139.178.0.0/18
IP: 145.40.224.0/19
IP: 185.74.108.0/22
IP: 212.60.32.0/19
IP: 213.221.192.0/18
IP: 2001:1a88::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:70:16:51:b5:42:fa:1d:c9:a1:75:51:41:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=574537d54f36f142231bc817038872cb607b21e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:a6:16:ee:14:d3:fe:71:ae:df:b3:5d:ec:
94:b1:37:01:7d:c8:5c:63:e3:ef:a8:50:93:14:fe:
a9:39:54:cc:c4:8b:eb:c3:8b:f7:a7:23:bb:9e:0c:
da:d2:dd:ba:f8:b5:29:08:9e:91:21:64:00:b9:3f:
ae:c8:a2:46:9b:57:55:a5:d7:4e:78:e6:8f:00:48:
9f:0c:e4:41:ad:68:18:b6:c2:5d:a1:32:9f:28:5a:
15:ed:8b:62:d5:0f:a9:3a:a0:8f:ba:3d:45:1f:95:
ee:3a:02:96:be:26:18:9f:69:96:b9:fc:61:93:48:
f8:65:63:48:9f:5b:85:50:4e:31:a3:ae:18:34:22:
ef:8a:39:22:0a:8c:f9:ac:06:22:64:12:c2:56:72:
6e:00:55:3a:3a:27:07:10:da:cd:f5:0a:dd:62:f1:
6f:fa:07:2c:c2:25:a4:0b:30:2b:ed:63:bb:06:04:
53:b5:15:1a:dd:e6:b1:16:e9:fa:75:d3:06:9d:f0:
e3:aa:ca:dd:5e:09:f4:97:93:c3:e6:20:2a:95:f6:
ee:ca:48:4d:6a:19:9f:1c:fc:ed:69:f2:7c:e6:69:
f0:4a:0b:75:db:b5:76:3e:ce:2e:96:10:e2:fd:16:
d1:1d:30:c8:0d:a6:e3:0e:dc:d6:7e:94:0b:a7:34:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.112.0/20
31.193.208.0/21
37.35.120.0/21
62.204.96.0/19
65.18.128.0/18
77.111.228.0/22
80.208.128.0/18
89.236.128.0/18
95.174.224.0/19
109.106.44.0-109.106.63.255
138.248.48.0/20
139.178.0.0/18
145.40.224.0/19
185.74.108.0/22
212.60.32.0/19
213.221.192.0/18
IPv6:
2001:1a88::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8843
15600
Signature Algorithm: sha256WithRSAEncryption
60:e0:c9:7f:c2:b8:6a:b1:31:f2:c2:0b:15:8c:d0:69:cc:47:
6c:3c:02:0d:43:7e:52:ee:05:d0:3c:71:0f:ca:d3:ae:94:79:
a4:a3:3d:67:52:47:d5:4e:20:14:e7:04:57:eb:e0:18:e3:14:
a8:24:2b:42:c6:93:11:59:ee:56:5c:de:8d:b5:fc:c8:f6:1b:
8c:df:ff:39:35:1e:87:b6:3b:19:a5:37:ab:06:be:19:5c:41:
2d:4d:38:c0:2e:70:80:9d:99:03:29:f1:66:1e:41:f8:f5:b5:
b9:93:55:c3:02:eb:32:fe:5b:2c:3b:3a:e9:0b:d4:12:d7:19:
15:08:e7:a7:d9:d1:fb:40:c2:86:89:2e:cb:14:af:5e:7a:c4:
47:d1:46:c4:13:b9:3e:f0:d7:5c:c7:c9:b7:0d:a2:7d:c5:03:
41:58:e1:f1:1a:63:1c:79:d4:f8:87:ff:fa:b8:ea:6a:19:60:
03:3d:d7:d6:86:b3:62:c4:7a:a9:84:f6:f3:88:d6:32:68:c3:
2e:e5:16:eb:5d:49:f6:77:6a:18:d3:4e:5d:5c:19:05:da:67:
3a:f0:d0:fb:05:41:a6:7a:cf:25:aa:67:c2:24:e7:0f:a7:2c:
00:32:c1:cf:70:b8:d9:53:26:fc:cd:67:8d:0d:c4:85:81:1c:
cb:e9:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:40 2024 by rpki-client on console-ams.rpki-client.org