Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer (raw, json)
Hash identifier: Htk+vcvyoxTw2lyGDL92geS5/YS9xXsFfZ1xo0L/sPU=
Subject key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94ADBF8A07A88C2B40083D5C919CFAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42894
IP: 131.237.0.0/16
IP: 144.43.0.0/16
IP: 145.12.0.0/16
IP: 145.31.0.0/16
IP: 145.45.0.0/16
IP: 145.50.0.0/16
IP: 145.69.0.0/16
IP: 194.104.116.0/22
IP: 2a13:e080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:db:f8:a0:7a:88:c2:b4:00:83:d5:c9:19:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:ff:9c:50:e0:92:7e:9c:79:e9:d0:29:bd:
a0:32:b0:01:1a:0e:38:7c:53:f1:74:ad:23:dd:9a:
9c:60:68:ba:bb:67:ca:2a:42:f5:89:1a:b5:f0:13:
ca:0d:2d:66:fb:72:4c:40:ac:fa:07:3d:2a:16:30:
04:a7:c5:01:d8:e6:10:1a:82:68:45:9e:62:f7:c5:
57:82:33:22:a6:8d:03:23:75:de:c9:6c:20:31:15:
6c:51:9c:b9:c6:d7:97:b3:c9:3c:99:a9:84:43:97:
8d:45:41:fa:7f:36:4a:2a:41:59:c9:7b:33:24:d4:
fe:6d:96:58:f5:f9:a6:e5:b3:1d:25:d7:84:16:6c:
9a:e7:ee:fa:0a:bf:e2:7c:6c:93:16:ff:0e:32:cf:
ed:31:ea:fb:07:fc:c2:f7:4f:ea:a2:78:1a:a8:12:
a9:1f:ff:e5:25:f9:28:84:99:65:1d:e4:7a:82:62:
16:3b:89:89:64:4b:72:0c:8e:49:dd:1f:b0:d4:82:
88:22:64:70:3e:20:45:df:46:f2:5e:f4:c1:6c:a0:
9d:9b:1a:c0:4e:b2:2c:fc:5a:09:0e:74:da:7e:88:
44:15:d3:1d:59:25:6f:f9:43:71:3b:40:b0:8c:ae:
0c:0e:cd:ee:22:88:f3:e9:5c:b0:e2:25:ac:00:04:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
144.43.0.0/16
145.12.0.0/16
145.31.0.0/16
145.45.0.0/16
145.50.0.0/16
145.69.0.0/16
194.104.116.0/22
IPv6:
2a13:e080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42894
Signature Algorithm: sha256WithRSAEncryption
8c:f0:f8:3c:ed:df:42:5b:6f:b0:6b:58:f3:31:82:20:32:de:
ff:ec:c8:68:0f:ec:dd:d2:91:44:e5:0e:1a:1d:6c:32:7e:61:
88:32:cc:92:7f:6d:e2:0b:c8:1c:c1:ab:b1:fb:c6:26:dd:53:
32:d4:9f:12:ef:a8:25:28:9b:4f:a4:9b:13:3e:02:20:08:f1:
37:52:03:79:32:11:a2:90:fd:b4:04:63:71:ab:4b:4e:89:26:
af:8e:da:5a:1a:d0:65:06:f8:1c:3e:c4:4b:2c:f1:7c:e6:b2:
b3:ed:79:af:6d:fb:2e:5c:13:93:47:26:00:10:4d:43:4a:54:
63:ac:12:aa:56:da:55:df:af:46:d9:51:1c:eb:0a:a6:f0:40:
1b:cc:54:23:1d:72:5e:4c:f0:dc:16:85:fa:7d:98:e7:90:c0:
7e:7a:b5:1d:eb:a0:00:87:d5:7e:db:f6:3f:ba:bc:26:7e:5b:
86:33:66:60:90:6a:0d:83:8e:77:f6:05:40:9e:01:a1:7e:b8:
92:d8:10:12:fe:32:00:c2:6a:2b:62:f3:4e:55:81:7e:d7:d6:
83:64:c5:d9:d7:f5:fc:93:db:ba:c1:8b:9f:1d:4e:81:cf:8c:
0d:91:61:c1:bb:97:c1:d3:70:62:b1:12:96:84:e7:f2:9f:28:
99:4a:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:17:35 2024 by rpki-client on console-ams.rpki-client.org