Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
File: b1xXEvu82DJBnUxYhK47w8Shbns.cer (raw, json)
Hash identifier: zN0GZMX9w7trRx+uo3URpnp+LwQPaa9lJF6GX0QjF0U=
Subject key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB13EE3CB8818867617B2B43608F99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38917
AS: 198541
IP: 81.162.0.0 -- 81.162.23.255
IP: 87.255.224.0/19
IP: 91.219.72.0/22
IP: 91.233.28.0/22
IP: 91.236.60.0/22
IP: 109.111.64.0/19
IP: 149.255.16.0/22
IP: 176.110.160.0 -- 176.110.215.255
IP: 185.24.112.0/22
IP: 185.86.112.0/20
IP: 188.0.192.0/19
IP: 194.32.156.0/22
IP: 217.175.32.0/20
IP: 2a04:2cc0::/29
IP: 2a07:3cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:13:ee:3c:b8:81:88:67:61:7b:2b:43:60:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:9b:43:cf:ef:9c:77:b2:03:1e:6c:29:9b:
a2:32:46:f3:a2:ce:2a:b6:b7:f8:1b:72:2a:49:91:
7c:f5:67:5c:c2:ba:ff:92:44:62:25:18:0d:1c:79:
64:a2:b9:4d:6b:61:37:cf:dd:ab:e0:f2:d5:3d:e0:
4b:b2:48:b0:d0:0c:b6:37:ee:5a:d5:e9:3c:11:3e:
4f:45:ec:14:59:97:03:ce:03:37:75:03:a3:e2:e0:
0f:da:f1:9e:f9:0c:7b:32:84:30:62:b3:a6:a7:e2:
53:bc:96:87:b9:08:dc:18:ee:f5:9d:81:59:17:4e:
ac:0f:e8:70:59:af:7d:36:1f:2c:ba:b0:4a:7d:79:
e7:4d:ea:91:53:9b:91:f3:26:8b:b1:9c:83:d7:22:
11:83:b9:a8:0a:7a:7e:e7:83:40:e7:b6:72:5b:88:
76:12:ff:61:0c:bd:12:63:13:d4:ff:ea:12:b8:a1:
8f:9f:2c:60:b4:60:3d:14:57:94:8e:ef:72:91:f2:
d6:5b:03:d6:b2:25:c3:f0:5a:d9:9b:bd:f7:85:ae:
38:91:15:1c:64:c1:93:2c:44:f5:93:f4:61:08:ec:
74:68:26:a5:5c:33:f2:8b:99:32:bc:0d:cd:05:15:
0f:96:21:85:57:e1:ac:15:71:ee:32:b1:0e:ae:c6:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.0.0-81.162.23.255
87.255.224.0/19
91.219.72.0/22
91.233.28.0/22
91.236.60.0/22
109.111.64.0/19
149.255.16.0/22
176.110.160.0-176.110.215.255
185.24.112.0/22
185.86.112.0/20
188.0.192.0/19
194.32.156.0/22
217.175.32.0/20
IPv6:
2a04:2cc0::/29
2a07:3cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38917
198541
Signature Algorithm: sha256WithRSAEncryption
06:ba:3e:89:a9:7a:92:f3:5a:5c:48:3f:e8:26:ca:81:d1:6f:
27:6c:bd:90:bc:7e:46:73:c0:b1:c4:5c:dc:51:46:e1:4f:e1:
30:32:3f:62:cc:fe:d2:86:c8:95:9f:49:0e:79:fc:05:24:6d:
1a:f1:f9:54:0e:f0:34:46:9d:d7:9a:8e:42:d3:b8:1c:61:d2:
35:73:78:b2:a5:be:f4:bc:76:f4:48:bf:47:8b:36:a6:cb:51:
7f:3e:69:e3:24:50:0a:d6:54:63:d8:a9:2c:2e:f5:49:04:52:
1c:28:3a:31:2e:e0:23:6c:77:ca:ff:1b:5a:1c:e3:84:27:6f:
ae:72:b7:38:fe:67:3f:bd:23:63:9e:2f:a7:ed:54:52:34:bd:
72:3c:ad:b2:2c:9d:9d:c5:39:c1:12:3e:c8:37:ca:9f:ed:66:
3b:1b:8f:90:72:99:65:e6:37:18:92:4b:73:ec:32:d0:df:92:
12:96:7d:96:6d:39:42:f1:fe:55:05:d3:d7:45:d5:52:3d:49:
78:53:a9:32:43:6b:4a:f1:c2:18:d1:e3:42:4e:2f:56:22:a4:
56:e6:1d:32:67:56:77:f0:80:5a:cc:d1:24:43:de:19:08:ee:
29:b9:20:ae:bd:02:b3:18:78:ca:c0:4e:94:f2:4d:a5:ad:9b:
73:63:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:01 2024 by rpki-client on console-ams.rpki-client.org