Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer
File: cnS17iqgd4rxMENYIlrGflUXCog.cer (raw, json)
Hash identifier: nR9Yhp2GmUVG8vvPGZ3v2XGCzBhhn8k9/icg+9dKm3E=
Subject key identifier: 72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BE95B4F54F65971A2DD151CA6A4AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205115
IP: 87.120.56.0/23
IP: 87.120.70.0/23
IP: 87.120.82.0/23
IP: 87.120.94.0/23
IP: 87.120.188.0/23
IP: 87.120.238.0/23
IP: 87.121.80.0/23
IP: 94.156.38.0/23
IP: 178.249.236.0/22
IP: 185.134.108.0/22
IP: 2a06:eb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e9:5b:4f:54:f6:59:71:a2:dd:15:1c:a6:a4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7274b5ee2aa0778af1304358225ac67e55170a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:a6:bf:83:4d:a1:53:9e:ea:2a:fe:98:6c:
09:c8:4d:15:c5:85:cd:2a:ba:cf:ab:84:33:02:8e:
90:1a:34:57:ff:13:40:b0:95:7d:0b:7d:7d:25:79:
da:de:94:ba:6e:bb:41:f8:8e:46:37:59:bb:34:f1:
78:49:6b:ed:84:6c:c5:9f:b4:eb:3c:27:5d:14:bd:
6b:49:1f:e7:7c:f8:4f:1a:2b:2f:ad:e0:d3:c6:e1:
b8:8f:71:b2:52:fd:8d:1a:d0:46:f5:5d:21:94:ca:
80:be:2f:fc:98:89:44:c8:90:2a:11:f4:4b:9d:f0:
37:4e:50:6a:4b:bb:71:4c:75:54:2d:8d:ef:b6:a3:
4e:d5:78:7b:3b:d6:ab:dd:09:98:fa:48:5b:9d:6f:
c9:5f:5a:6b:22:fb:24:9f:6c:ad:fc:61:ce:59:f6:
7e:f4:d6:d1:a2:a0:80:8e:77:f4:46:c2:bc:f1:a4:
9d:b1:3e:24:4c:f4:dc:03:b2:31:b6:30:0b:45:c3:
d8:05:c1:86:05:da:e2:02:54:3d:bd:37:e7:e0:6f:
8f:7c:80:38:10:71:6a:e3:19:1d:36:48:f9:5d:0a:
c8:59:cd:ed:2f:37:0c:46:5d:62:a7:9e:6b:ee:91:
85:e8:12:72:14:38:ca:ef:aa:57:45:f5:bd:95:b1:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.56.0/23
87.120.70.0/23
87.120.82.0/23
87.120.94.0/23
87.120.188.0/23
87.120.238.0/23
87.121.80.0/23
94.156.38.0/23
178.249.236.0/22
185.134.108.0/22
IPv6:
2a06:eb40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205115
Signature Algorithm: sha256WithRSAEncryption
15:77:80:ea:12:8e:01:60:ab:46:a0:82:3f:66:a0:59:72:ce:
f7:96:83:3e:eb:43:8a:a1:55:30:68:37:e1:ea:2a:eb:aa:49:
38:c8:76:bd:76:79:b9:4f:03:fc:dd:32:44:89:9e:08:76:2a:
4e:9c:7a:8c:67:f6:0b:9c:cf:b2:03:5b:50:65:e7:da:e7:50:
57:1a:21:17:27:20:cb:75:03:03:0c:d9:06:f0:9e:bc:cd:9b:
7c:d8:f1:5d:b9:fc:4a:56:94:ba:dd:1f:ed:77:7f:e9:9f:ba:
84:7c:8e:5f:56:f4:ab:f9:0e:d2:31:83:70:1c:91:ff:41:d7:
36:60:a2:90:a3:2b:7b:05:32:61:a4:8a:cb:37:83:db:5b:3c:
44:b7:d6:05:6f:18:d3:d8:72:81:25:22:73:a0:27:b8:81:5d:
e4:f4:64:b7:71:73:ba:31:09:56:13:d6:4e:3f:10:ec:93:6e:
12:3e:f2:c0:88:4f:b3:db:84:2d:dd:f4:44:9f:67:ab:1e:3b:
67:8f:07:97:65:56:92:54:ca:f4:94:0c:36:67:59:83:92:60:
3c:02:14:af:8c:c3:4e:35:2e:8f:5a:e6:50:4e:64:37:27:96:
d9:b5:25:8e:36:67:fe:8c:2f:1a:43:20:d0:65:d8:8e:26:42:
b3:f7:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:59:07 2024 by rpki-client on console-ams.rpki-client.org