Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.cer (raw, json)
Hash identifier: JE2oFl8ityqPDB4KB0MJ62DVlv35R0T7m4cIC4KZHAY=
Subject key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7A9B359A055D10BB4BC8B9312E7B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57099
IP: 91.229.222.0/23
IP: 146.255.104.0/21
IP: 164.138.80.0/21
IP: 185.16.224.0/22
IP: 185.47.216.0/22
IP: 185.56.40.0/22
IP: 2a04:3c0::/29
IP: 2a04:d840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a9:b3:59:a0:55:d1:0b:b4:bc:8b:93:12:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:78:a6:21:d4:d6:cf:5e:10:33:33:6c:e2:
5d:3d:cc:6d:4b:c6:63:72:61:b3:ae:90:19:04:54:
cb:b8:74:20:ea:37:d9:50:99:d2:c3:5c:06:c0:d4:
61:8a:40:70:85:d9:cd:9f:b6:94:7b:7b:c0:e7:6a:
34:d7:98:a9:b1:68:3e:79:c9:42:b8:3d:d9:74:5d:
e1:ca:15:c5:87:8f:a2:4d:cf:4f:e2:8a:76:e9:eb:
96:99:61:cc:c8:f2:fa:a6:95:66:9d:a3:b3:08:5c:
26:d4:de:23:36:db:62:3a:fc:4b:bf:51:78:40:1c:
80:43:ba:fc:c0:6c:d0:24:38:34:b9:24:f1:eb:71:
9e:49:91:51:72:28:aa:81:42:6e:76:ed:95:fc:82:
dd:93:44:bd:da:38:b8:a1:5d:37:a7:f2:32:4e:fd:
10:db:49:c3:03:2e:37:ca:4e:68:11:bf:f5:9a:f1:
b7:19:20:e3:e4:b4:78:16:71:49:6c:60:76:58:04:
5b:a3:10:33:95:95:95:ff:d9:9b:39:0f:13:75:0a:
6d:d9:eb:cb:5b:6b:19:92:4b:54:36:b1:81:fa:84:
5c:28:dc:e9:fd:b9:f3:77:47:97:06:40:8c:8a:e3:
09:74:3a:08:6a:85:90:cc:87:3f:4e:2e:71:45:f7:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.222.0/23
146.255.104.0/21
164.138.80.0/21
185.16.224.0/22
185.47.216.0/22
185.56.40.0/22
IPv6:
2a04:3c0::/29
2a04:d840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57099
Signature Algorithm: sha256WithRSAEncryption
43:c3:0f:24:1e:17:b7:ad:43:0c:ee:a9:ed:9b:f3:bc:60:a1:
e4:2c:c6:cd:47:ae:04:16:39:31:1a:78:2a:ff:f8:e3:e1:dc:
46:a5:a9:92:73:0c:ad:cf:0e:66:c6:65:4b:11:dd:18:0c:93:
b2:d4:ff:db:30:8e:ca:a4:d2:df:d7:12:43:6b:ba:5a:14:0e:
1b:07:0e:40:af:ae:65:8d:e2:26:c5:43:d2:0f:4e:84:ec:56:
be:64:6e:24:db:63:cb:33:0f:fc:b0:ec:bb:b5:d4:b3:b1:92:
fc:1d:91:a2:c8:53:34:89:58:7a:5b:86:fb:36:11:cf:6d:25:
8c:12:d3:bc:a0:2a:c4:1b:54:01:48:2d:cc:b5:2a:47:2b:4b:
2b:53:bf:d7:0a:c3:c1:84:f7:35:4b:0f:fc:2e:5b:69:1e:46:
fb:a2:c1:5e:25:df:43:d5:b1:85:e2:e4:63:dd:58:03:1e:e9:
01:5b:82:a2:41:46:d6:bd:22:5f:7b:09:29:6f:56:5f:fd:8e:
67:23:56:1f:2d:a4:35:3e:07:37:6d:10:b8:d0:09:84:1d:6a:
5f:e1:29:f0:c2:9a:c5:e1:7d:b3:d3:33:af:b0:04:1d:b5:c3:
32:90:42:99:fe:5f:4b:cb:70:31:d5:8a:8d:0c:87:89:4c:31:
ca:08:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:14 2024 by rpki-client on console-ams.rpki-client.org