Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer (raw, json)
Hash identifier: LUh+p8ZUM7t7i6NXNcwtMDKD+nq5vunVatATRBX5+DE=
Subject key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ED150C920A2B738151CC4C2F6E9AD95E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Apr 2024 07:58:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41354
AS: 43313
IP: 137.22.160.0/19
IP: 149.106.160.0/19
IP: 185.20.128.0/22
IP: 185.127.192.0/22
IP: 185.179.120.0/22
IP: 185.207.68.0/22
IP: 212.82.64.0/19
IP: 2a04:1700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:50:c9:20:a2:b7:38:15:1c:c4:c2:f6:e9:ad:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 12 07:58:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7135e3894634482b08317775c79657e9b8312d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:3c:a8:7e:10:31:9c:eb:3a:66:e4:c2:ef:
9a:fc:b6:d4:79:0f:0d:fb:c2:46:f4:2a:42:4a:3e:
ba:47:a1:02:3b:2b:dd:a5:a0:28:b3:b0:86:02:b3:
2c:13:14:bd:f9:0d:3b:4b:e2:b9:c3:36:7b:a8:7e:
0e:9c:0d:46:98:fd:d5:45:40:80:0a:2e:04:f6:de:
be:67:43:a0:60:8e:9e:dd:ce:e4:bb:23:47:6d:52:
92:f3:dc:9f:ac:13:b9:6a:1d:3a:f7:e3:1b:67:81:
8a:ab:38:9d:a0:07:c5:d9:c2:e5:5e:34:21:89:78:
13:11:fa:b8:0f:bd:5e:f3:e2:66:30:39:b6:5e:fe:
30:2d:6b:e9:ef:d8:78:18:5e:ba:08:d1:e7:4b:59:
11:6b:61:e1:69:b9:1d:2e:a8:36:fd:5f:b5:0a:5b:
f3:6a:a1:5a:da:8c:b4:b5:fc:e9:00:83:fc:20:40:
b4:02:06:89:05:16:31:c4:dc:cb:18:be:e3:57:91:
d8:7a:94:b4:34:e7:be:a6:7c:ee:da:8b:b5:99:24:
42:8a:86:57:1e:81:0a:95:b7:d4:3b:ed:be:84:28:
34:9a:84:72:e7:f7:95:54:00:80:93:73:12:da:13:
0f:b5:6c:8e:9b:57:28:94:8d:57:6c:81:71:c9:63:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.22.160.0/19
149.106.160.0/19
185.20.128.0/22
185.127.192.0/22
185.179.120.0/22
185.207.68.0/22
212.82.64.0/19
IPv6:
2a04:1700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41354
43313
Signature Algorithm: sha256WithRSAEncryption
2d:7b:d7:96:39:d3:26:d0:72:5a:94:5d:0b:8f:a5:3f:9b:14:
09:c8:a7:6a:12:dd:61:14:46:9b:3d:60:98:05:4e:d9:2c:dd:
5e:f6:cf:6c:5e:a5:3b:c4:c5:40:f9:70:b1:97:30:ce:72:a5:
ba:67:02:34:5b:6d:4b:b4:f9:0e:c7:a8:b2:dc:87:d8:9a:f2:
ba:14:f5:cd:99:39:1d:42:f6:eb:4e:1b:69:b8:03:fe:a8:fe:
e4:f1:1c:95:31:11:da:3b:a6:55:45:9b:8e:d5:a8:dc:b2:cf:
10:d7:07:8e:d8:fd:f0:62:a8:ec:ac:73:24:7d:42:ce:74:a5:
2b:91:f2:ca:2c:cd:00:57:20:17:28:ad:2f:85:a3:9a:7f:a9:
f9:12:77:14:b1:23:df:73:0a:31:fa:8d:88:5e:77:6d:d1:3b:
8d:65:9d:68:da:96:ab:3b:23:89:07:74:3a:d2:96:91:0c:29:
55:d4:e4:6e:af:1c:b7:64:6a:e3:c4:b0:8f:2f:5b:02:2d:86:
69:13:00:06:01:07:42:b3:d9:61:1d:57:41:49:f7:74:c2:0d:
58:ad:85:9b:57:f0:3c:13:3b:b1:0b:2a:69:ae:91:6b:54:54:
16:f4:fd:f7:64:ca:e6:1e:52:dd:9b:99:39:4b:20:26:f6:78:
95:c7:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:19:23 2024 by rpki-client on console-fra.rpki-client.org