Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
File: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer (raw, json)
Hash identifier: bVy3wqqQ4hufERqf/DrBIREIzmwOLveSeDTy32FTdD4=
Subject key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80155E6C2F7417F0236A14DE807140B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60188
IP: 45.81.128.0/22
IP: 45.91.80.0/22
IP: 45.94.68.0/22
IP: 45.133.236.0/22
IP: 45.135.116.0/22
IP: 45.140.88.0/22
IP: 45.141.136.0/22
IP: 45.152.176.0/22
IP: 45.154.12.0/22
IP: 45.155.220.0/22
IP: 45.157.92.0/22
IP: 185.106.176.0/22
IP: 193.42.24.0/22
IP: 2a06:5040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:55:e6:c2:f7:41:7f:02:36:a1:4d:e8:07:14:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:87:65:dc:c6:22:51:bc:17:37:a6:d1:b6:
7c:81:79:64:b8:02:e7:40:68:79:ec:0c:9d:33:a3:
15:40:98:9e:c8:ff:d5:a7:5c:f9:97:50:d6:6b:00:
15:28:8f:f3:66:45:68:c0:75:ad:49:57:88:bf:36:
22:6e:de:fc:b8:bc:73:c9:f9:cd:a0:41:86:f6:53:
db:bd:b3:ab:c5:95:21:a9:29:0e:bb:b8:e2:8c:36:
cc:f8:cb:dc:03:fc:f9:b5:03:28:05:27:58:f8:11:
3f:c5:08:b6:5c:eb:ab:2b:89:99:26:42:a4:18:71:
14:ab:ef:3d:04:eb:37:7d:89:d2:89:29:f3:cb:1a:
3a:1a:8e:1d:ef:96:1c:e9:78:d5:7c:0c:5b:53:7f:
8c:65:4f:b0:95:43:0a:ff:41:06:98:61:be:c2:88:
3a:39:9b:b4:0d:c1:4d:a7:1f:b5:61:36:98:45:0f:
f8:3d:cd:91:ab:65:dd:45:fc:46:7d:9b:c5:99:82:
09:ef:f7:db:16:80:16:dc:64:c3:1f:da:3f:4b:71:
ec:f0:d4:89:b2:87:46:c7:3d:19:c6:98:d5:73:83:
c8:27:2b:f5:ab:7d:13:53:76:0b:ba:7a:86:41:89:
27:2f:c9:de:53:d5:d5:ef:22:39:9e:c0:61:b5:7a:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/22
45.91.80.0/22
45.94.68.0/22
45.133.236.0/22
45.135.116.0/22
45.140.88.0/22
45.141.136.0/22
45.152.176.0/22
45.154.12.0/22
45.155.220.0/22
45.157.92.0/22
185.106.176.0/22
193.42.24.0/22
IPv6:
2a06:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60188
Signature Algorithm: sha256WithRSAEncryption
a8:0e:61:6d:c4:00:d1:9d:66:c3:36:ea:67:e4:1c:c5:26:f6:
a7:4f:63:39:59:d2:d4:b4:f7:74:69:90:88:06:36:8b:70:76:
80:35:4f:1a:db:fa:df:58:b9:66:cf:93:7d:2f:8c:e0:ee:69:
26:a8:75:d4:10:23:47:fa:5f:6e:e8:85:2f:92:83:0e:ae:35:
f3:a2:3f:8d:fd:1d:ad:c1:3f:40:fc:60:2f:b5:3e:0d:36:ad:
61:d4:99:b7:ff:fe:e4:dc:ca:74:9c:ba:7e:08:52:5e:f1:db:
9b:9a:c1:74:08:32:bb:1f:ab:3e:55:b2:99:64:79:44:79:17:
c4:cd:8a:ea:bd:91:49:32:78:3a:51:74:fc:25:75:e7:04:9a:
ff:ed:49:4a:06:58:0a:25:1c:a7:ac:98:1b:b5:ab:16:d0:58:
8f:19:24:2c:0d:e3:ee:5c:99:6b:0e:20:ac:d3:97:0e:74:74:
ce:78:51:2d:44:08:73:aa:c5:ed:0c:00:e5:12:f4:6f:52:fc:
2c:5a:c9:8f:15:cb:70:2d:70:2a:bd:8b:b8:ee:9c:ca:c9:78:
2c:e9:03:69:03:42:88:55:19:d4:6b:c1:aa:54:59:44:08:3e:
dd:e2:87:51:6e:20:eb:ed:84:50:44:3a:af:da:81:e2:76:88:
7f:9c:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:34:30 2024 by rpki-client on console-ams.rpki-client.org