Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer (raw, json)
Hash identifier: xwZ4ia6ItfUSLi/315+iP9BqASi+yEEmGb40LvDXTbs=
Subject key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7272F0F043A0E583D111FF6DAA403DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 2130
AS: 22683
IP: 130.138.0.0 -- 130.141.255.255
IP: 130.143.0.0 -- 130.145.255.255
IP: 130.147.0.0/16
IP: 144.54.0.0/16
IP: 149.59.0.0/16
IP: 161.83.0.0 -- 161.85.255.255
IP: 161.88.0.0/16
IP: 161.92.0.0/16
IP: 167.81.0.0/16
IP: 192.33.131.0/24
IP: 192.68.31.0 -- 192.68.39.255
IP: 192.68.48.0 -- 192.68.50.255
IP: 192.92.108.0/24
IP: 192.101.81.0 -- 192.101.90.255
IP: 192.109.128.0/24
IP: 193.25.48.0/20
IP: 2a02:20e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2f:0f:04:3a:0e:58:3d:11:1f:f6:da:a4:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7015ed275005408d2a86a2303701744430eda34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:38:e0:74:f5:8d:e8:6a:6f:2e:ce:12:57:
bf:25:0c:0c:4d:2e:0d:d2:a1:b6:30:3c:8e:17:18:
37:98:c5:ac:fb:b6:d8:d2:bb:1e:33:c9:16:69:05:
a2:21:e4:cc:07:4d:28:c7:43:cb:c6:3e:a5:f8:8e:
a4:b8:ad:d9:01:11:58:cf:a3:a5:76:fe:f6:6e:5b:
a1:54:cd:8f:eb:e9:d6:25:87:38:89:20:b7:2d:79:
5f:59:0f:e0:4e:11:ad:c4:f1:48:e3:91:a1:e1:e1:
f3:6d:49:2e:b0:c7:a8:e6:11:6d:d0:a5:79:1c:3c:
42:ab:f5:18:e0:be:bf:9e:3a:02:37:6c:d1:5c:c8:
b9:eb:48:a3:0c:7a:40:65:16:54:30:e8:b6:8b:a0:
5f:79:68:07:c2:ce:02:8c:f4:c6:59:57:e3:11:31:
da:24:9b:02:62:db:0e:6e:f5:bc:bd:79:6c:4d:26:
78:13:62:95:d2:8e:18:5b:23:b1:8c:cb:5a:99:94:
f4:ec:d5:9b:ee:21:48:0b:cb:c3:d3:71:7b:26:0c:
5f:6a:e7:34:46:fa:d6:4f:83:61:c6:46:31:76:60:
d9:f5:4d:bd:58:55:4c:c6:42:c3:96:89:f0:05:b7:
99:c2:4e:8e:83:78:db:d0:c5:bf:18:01:03:80:01:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.138.0.0-130.141.255.255
130.143.0.0-130.145.255.255
130.147.0.0/16
144.54.0.0/16
149.59.0.0/16
161.83.0.0-161.85.255.255
161.88.0.0/16
161.92.0.0/16
167.81.0.0/16
192.33.131.0/24
192.68.31.0-192.68.39.255
192.68.48.0-192.68.50.255
192.92.108.0/24
192.101.81.0-192.101.90.255
192.109.128.0/24
193.25.48.0/20
IPv6:
2a02:20e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2130
22683
Signature Algorithm: sha256WithRSAEncryption
b1:02:8d:55:12:c4:19:b6:7c:4d:1b:08:e3:4b:12:41:cb:e3:
c8:84:a8:73:6f:96:f2:e0:1c:e3:0a:e6:c2:cd:26:d0:d8:8e:
63:ca:2a:f4:21:86:68:fa:3d:2a:56:cd:cc:ae:17:92:4b:73:
d0:da:29:45:68:87:64:a5:a8:d4:97:d4:09:ca:c1:c4:93:34:
43:41:6b:08:67:cf:bb:5c:de:09:70:99:84:05:18:80:12:96:
c8:3e:32:93:52:05:3b:64:ed:f2:10:da:f4:d6:6d:54:97:d6:
75:e9:ac:21:38:cc:be:97:53:4a:ce:99:3e:07:48:e0:77:01:
ab:f2:25:a9:03:98:ef:23:60:6c:fc:a1:e2:69:11:2b:9d:f3:
32:40:76:55:cb:ef:5a:59:ba:6f:ba:f8:32:cd:39:84:fb:e6:
8c:3b:9b:ab:02:74:0b:c4:36:40:0b:cb:45:28:9b:df:aa:6e:
39:78:b8:a3:f7:b5:f6:f4:cf:55:4a:7c:df:e9:67:d8:2b:a1:
fa:fd:f8:92:bd:1b:78:dc:3c:fe:09:7e:0e:19:ce:57:33:5f:
c0:d5:f0:a4:c8:4b:ba:10:56:06:e9:80:db:84:3c:ba:bc:87:
41:35:a0:3d:cf:96:21:00:70:d3:cf:fd:06:83:4f:af:35:0b:
42:38:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:20:42 2024 by rpki-client on console-ams.rpki-client.org