Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer (raw, json)
Hash identifier: 1TFbiA7BUaZS3tYYyd9je5Pf+bXE7KR5fUk1bcMJsA4=
Subject key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B716F94CABA2EEB7FF14210337B06E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13037
IP: 51.148.0.0/16
IP: 51.155.0.0/16
IP: 51.170.0.0/16
IP: 62.3.64.0/18
IP: 77.104.128.0/18
IP: 82.68.0.0/14
IP: 88.96.0.0 -- 88.98.18.255
IP: 88.98.21.0 -- 88.98.95.255
IP: 88.98.128.0 -- 88.98.167.255
IP: 88.98.170.0 -- 88.98.191.255
IP: 146.66.64.0/18
IP: 212.23.0.0/19
IP: 217.155.0.0/16
IP: 2a02:8010::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:f9:4c:ab:a2:ee:b7:ff:14:21:03:37:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:12:6b:b6:b4:73:15:e1:e2:e2:c4:2e:4b:
b9:39:82:d4:42:20:aa:53:e3:52:05:76:ff:3a:1b:
0a:c0:1d:a4:00:61:ff:bc:c9:df:82:61:57:50:62:
29:30:60:ba:db:84:13:30:eb:50:18:e1:d9:1e:be:
31:c5:28:a9:5a:d7:4c:d2:6e:8e:bb:6c:34:f5:9b:
64:2c:37:07:bd:4e:dd:0f:ba:4c:22:31:f1:07:ed:
6a:d9:79:66:5c:bb:57:2f:1e:20:c1:e3:5f:3c:c5:
c3:18:8b:51:a9:cf:73:30:04:e2:66:41:40:0a:b8:
78:61:b6:d9:08:68:77:f7:93:27:76:30:32:67:42:
e6:25:ac:5e:e4:82:59:50:f4:d2:f1:43:10:1e:bb:
40:57:6e:0b:20:48:da:0c:b3:03:43:8c:5c:29:f8:
20:0b:fb:20:7b:64:19:ed:20:e2:05:ff:48:c6:99:
88:fd:63:2d:6e:87:46:44:c3:2d:cd:8b:fe:d9:5e:
db:d7:9d:da:2b:c3:09:39:55:38:0a:e8:ed:15:29:
d3:4a:d3:1b:f2:7b:2d:bf:2f:59:4c:26:3a:ca:15:
59:7e:85:85:db:8e:5b:23:2e:e2:8a:e8:6c:2e:ba:
bd:f5:3c:ed:80:02:20:fa:eb:21:83:45:1a:4b:e2:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
51.170.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/14
88.96.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13037
Signature Algorithm: sha256WithRSAEncryption
73:bf:2f:08:57:07:57:52:60:13:4e:4d:b0:b7:96:48:b9:3c:
87:e0:1b:c6:a9:d7:1f:1c:dd:f7:ba:f5:e8:02:86:fb:0d:68:
88:9a:21:a2:bb:09:02:48:76:ff:68:fc:c0:53:c8:d9:77:e0:
64:fb:96:d7:ec:3a:35:44:c1:57:77:b0:fb:32:30:28:92:8c:
57:00:9a:e9:35:3e:9e:9f:4d:3c:d8:5e:d8:38:c4:44:89:88:
35:3e:b9:70:94:b8:b8:f9:68:99:c4:12:d3:02:6a:31:88:7a:
08:1a:05:01:99:6f:fd:a0:02:e0:e1:96:75:95:5c:11:32:13:
f4:cd:d1:3c:b2:3a:5b:bc:fa:02:75:be:30:f1:bc:7b:e9:57:
8d:08:76:bd:fa:db:31:59:43:a5:66:54:56:b7:c4:c5:0f:de:
f3:58:f9:63:c9:6e:8a:1c:6a:5f:f8:14:91:f1:dc:f6:e0:8a:
aa:5b:45:8e:05:01:b6:9c:69:c1:5e:55:b0:db:c8:a7:b4:ad:
36:ea:fa:2b:d6:ff:90:67:56:f6:7b:b1:b1:5b:dd:26:44:06:
ae:a9:86:56:33:43:0e:5e:50:aa:e5:bb:5f:75:86:f2:fc:0d:
4e:3f:91:b4:d8:39:27:f5:4f:1b:3a:5d:af:34:08:f0:05:08:
17:e0:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:36:01 2024 by rpki-client on console-ams.rpki-client.org