Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.cer (raw, json)
Hash identifier: YqO9J9dpzvKh72XeIRuVepc7uohJQTd6LL3n8sdT8Gs=
Subject key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29D621BDD52A040CD84676104B7492
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41750
AS: 52214
AS: 59527
IP: 46.226.208.0/21
IP: 77.235.0.0/19
IP: 92.245.96.0/19
IP: 109.201.160.0/19
IP: 158.181.0.0/19
IP: 158.181.128.0/17
IP: 176.123.224.0/19
IP: 185.138.100.0/22
IP: 2a04:5600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d6:21:bd:d5:2a:04:0c:d8:46:76:10:4b:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:49:f2:b1:e3:99:78:cd:30:6c:03:b9:3b:
ef:69:df:63:b5:e2:a0:af:62:46:57:df:1b:ca:88:
30:28:bd:14:b5:df:f0:d9:66:65:aa:ad:9d:c0:78:
da:6a:3d:0a:e9:23:9d:11:11:ab:93:83:85:7f:b0:
b9:51:2c:2b:6b:b2:b5:54:9a:8c:82:5d:d9:fe:14:
f8:53:cb:e8:9a:aa:22:2e:79:a3:02:13:39:91:11:
01:8a:3f:d5:33:80:c9:56:de:a6:99:ef:c8:20:bd:
87:9a:8b:c3:e7:98:ee:8b:72:5f:ec:83:90:f8:9e:
ee:81:1d:a4:be:fe:52:d4:72:d6:34:1e:fd:d1:ee:
37:a7:37:93:33:b1:6f:22:f8:43:f5:57:00:2d:af:
fd:18:1d:9d:89:9c:e4:14:78:e9:42:b8:2b:66:fb:
07:d3:d2:7c:09:ef:41:5a:1b:a1:f4:f3:25:f2:ab:
02:07:bc:69:33:74:e3:7e:77:4d:fd:8c:92:4f:01:
0d:61:a3:b1:da:b7:44:fb:cc:78:d4:33:5d:4a:c1:
e4:76:cb:2d:d0:cd:e4:9c:71:9b:5b:a4:73:93:94:
55:2f:fd:80:9c:72:2c:6c:7e:08:ab:44:1f:66:50:
e9:e1:45:1a:e5:25:43:b6:10:bd:68:45:35:9e:75:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.208.0/21
77.235.0.0/19
92.245.96.0/19
109.201.160.0/19
158.181.0.0/19
158.181.128.0/17
176.123.224.0/19
185.138.100.0/22
IPv6:
2a04:5600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41750
52214
59527
Signature Algorithm: sha256WithRSAEncryption
3d:f7:1e:b6:0c:e7:cb:e2:e6:58:67:74:40:2d:17:16:2f:b4:
22:b5:2b:9d:ca:3f:9e:e9:de:27:bd:bf:51:b9:61:7e:54:cb:
73:6c:da:b6:84:93:c2:c3:00:c9:f4:76:ea:a3:12:b5:5a:49:
63:2b:ec:7f:78:8d:0a:ba:9e:7f:02:89:0e:6d:74:22:b6:04:
58:57:08:b3:5e:f8:03:6c:3e:cd:30:f4:3e:f7:f5:85:2c:5f:
5b:f6:93:76:09:35:cb:03:d3:40:7b:12:f0:9f:99:3e:b7:5c:
c9:cc:3c:f3:a9:c1:d0:12:0a:bd:02:d7:d9:89:21:5f:0b:88:
83:64:54:c8:2b:be:06:65:f5:82:73:b3:42:74:b8:d2:5d:29:
b9:e1:94:e9:71:f4:3d:22:93:a6:a0:55:0b:0a:c3:f2:6d:5f:
c8:1d:65:44:7d:9a:47:2b:d4:e3:2a:bb:a6:86:25:1e:ab:d3:
12:b2:ca:61:26:3e:03:24:3b:08:5f:22:a8:84:f1:5c:d1:43:
0a:08:30:9e:4c:32:9b:33:87:a6:30:f3:ee:e9:1c:88:b1:85:
2d:61:12:1b:f7:77:a8:80:24:db:06:11:5f:75:71:b8:5d:6b:
19:29:68:2e:a1:a6:03:bc:1a:0b:cc:4e:c0:e8:76:cc:6c:b9:
9f:a2:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:47:48 2024 by rpki-client on console-ams.rpki-client.org