Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.cer (raw, json)
Hash identifier: tJkvgw+tqJ8E0aOwSZjx4AbzjGmI1ALOQ4qkt/tsd5U=
Subject key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34930C0EB9D502E8492C86911875930
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204281
IP: 94.26.4.0 -- 94.26.23.255
IP: 94.26.26.0/24
IP: 94.26.30.0/24
IP: 94.26.45.0/24
IP: 94.26.66.0/24
IP: 94.26.72.0/24
IP: 94.26.74.0/23
IP: 94.26.86.0/23
IP: 94.26.94.0/24
IP: 94.26.96.0/24
IP: 94.26.100.0/24
IP: 94.26.102.0/24
IP: 94.26.108.0/24
IP: 185.108.140.0/22
IP: 2a01:b760::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:30:c0:eb:9d:50:2e:84:92:c8:69:11:87:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:07:0e:e5:15:e1:e0:0f:2a:fa:4f:f9:b0:
22:ef:49:e7:de:7d:6b:7e:1c:a8:9b:25:8e:8d:2c:
2e:3f:8b:23:64:6e:f2:c9:76:bb:c0:9b:bd:50:75:
20:a7:68:f2:c6:51:d9:f6:4f:7e:3a:c8:51:73:bf:
e6:1a:56:85:c8:e0:fe:53:77:1a:37:8c:1a:81:a6:
c5:46:e2:0b:c3:46:70:1a:b5:8a:9c:71:8e:22:78:
c9:bb:95:a9:7d:53:e3:6f:37:53:27:ce:0d:2c:7c:
37:e9:1a:94:52:fc:0d:59:aa:c5:8e:b4:98:7a:23:
ce:63:53:fd:3d:1b:fb:ac:cc:61:42:55:06:a6:c2:
8b:f9:a0:3d:86:81:c9:ef:3e:62:2f:f2:4a:e2:68:
c9:0a:ce:4f:3a:ed:65:ae:7d:75:56:1e:1e:22:f3:
a0:b1:ab:9a:91:83:ad:1b:a9:c4:40:2f:94:df:5c:
7a:3e:83:de:aa:20:f6:3c:24:95:bf:2c:e2:5a:23:
6d:c3:d1:15:f8:62:d8:69:bd:8c:a9:67:14:3b:09:
ff:39:87:04:6b:af:07:24:05:46:62:3e:95:ed:a5:
ac:a4:d2:61:c0:ca:d4:35:1c:73:7b:8c:36:92:b2:
da:94:60:9a:83:a0:79:3f:aa:e0:e8:45:73:4e:34:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.4.0-94.26.23.255
94.26.26.0/24
94.26.30.0/24
94.26.45.0/24
94.26.66.0/24
94.26.72.0/24
94.26.74.0/23
94.26.86.0/23
94.26.94.0/24
94.26.96.0/24
94.26.100.0/24
94.26.102.0/24
94.26.108.0/24
185.108.140.0/22
IPv6:
2a01:b760::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204281
Signature Algorithm: sha256WithRSAEncryption
41:21:cd:6a:aa:44:48:c3:4e:8e:87:f6:41:f8:1e:40:e5:5e:
93:fa:58:dd:73:c8:4e:a0:ab:88:ba:48:7e:96:a8:6e:7b:bd:
5a:1e:cd:82:85:bb:f5:82:ca:fe:6d:61:0b:d5:6d:43:6f:56:
3b:04:fa:86:5c:a4:ac:5d:50:af:fe:26:77:0d:ea:b0:1d:54:
3b:27:4c:b9:e6:92:71:f8:6f:56:73:95:23:70:d1:e3:94:b6:
4e:78:dd:10:8a:fb:c1:e3:71:54:c1:7e:0b:af:ed:4a:67:d2:
38:46:0d:6f:86:9e:ec:01:d1:05:b4:c4:cc:77:57:0c:fe:9f:
74:9e:c8:6c:8c:fb:6e:9c:4a:42:65:21:44:11:94:b7:fd:34:
21:64:8f:ec:d1:73:d0:6e:c4:3f:74:d7:07:18:aa:68:1d:fd:
31:36:28:bc:1d:c0:40:55:3c:04:ea:2f:82:0c:cc:62:3b:a1:
1f:4e:7b:8a:30:ff:bd:6e:bb:b7:d9:56:af:a1:e8:e5:7e:f2:
30:43:3f:fc:75:02:ca:53:6f:5b:2c:cd:47:7e:5a:36:42:12:
27:2c:ed:75:f0:22:b2:fd:b8:14:b9:82:47:50:45:55:f8:fc:
a5:3e:c4:47:79:ea:ff:27:05:57:c4:2c:db:e7:64:68:34:96:
88:55:d4:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 10:30:12 2024 by rpki-client on console-fra.rpki-client.org