Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
File: esYj77_BJHEhYiQMugKk2h1NzqM.cer (raw, json)
Hash identifier: xQt5hvh+gpzvm54Kn/CZkEYCyVHwVBs6r52M9x0NyzE=
Subject key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4939CB380B1BFCE276D23E401FA37D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212661
IP: 45.95.244.0/22
IP: 45.131.140.0/22
IP: 45.140.104.0/22
IP: 45.148.200.0/22
IP: 185.123.148.0/22
IP: 185.143.64.0/22
IP: 193.3.37.0/24
IP: 212.146.160.0/19
IP: 2a06:dac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:b3:80:b1:bf:ce:27:6d:23:e4:01:fa:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:1b:68:1c:5b:8d:19:e6:f0:6d:05:0e:27:
09:2a:30:10:c1:65:62:74:a7:78:07:dd:3f:d4:d4:
8d:1e:59:ab:a7:53:a3:06:cc:bd:c3:9f:72:dd:dd:
28:bd:48:d7:0b:ce:8f:0d:0b:e8:d0:5a:32:b5:e5:
54:51:d8:7c:2c:9f:c7:c2:64:8b:1d:16:f6:f5:be:
9d:92:6e:f6:7b:e1:86:19:27:12:4e:e4:e7:a3:08:
91:95:a1:f5:d0:52:70:b5:b6:89:4b:fc:45:25:4f:
5a:78:ec:8b:98:e2:ab:86:d6:8a:5c:65:41:76:a7:
e7:67:3f:f3:e8:80:07:cc:82:d8:ce:cd:2d:cf:ea:
d6:2c:05:a4:1a:1e:8f:ef:ac:9a:fc:fd:9a:d7:7d:
10:a6:a1:0e:60:9d:47:fe:f1:6e:de:ff:56:57:5a:
54:d2:1e:51:aa:47:bf:45:27:1f:22:fb:53:ee:51:
10:0c:a0:ce:45:a6:3c:f0:b3:38:a9:82:93:08:ff:
09:61:64:bc:ae:3a:ca:09:e2:af:e6:84:33:f4:ec:
6f:ad:f0:12:cf:c9:62:f7:32:21:40:ac:83:a4:d8:
69:e8:70:7b:0b:07:43:08:34:a3:9c:6b:59:b9:ab:
c5:14:f5:e0:5f:78:7c:e7:53:12:54:b6:74:1e:50:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.244.0/22
45.131.140.0/22
45.140.104.0/22
45.148.200.0/22
185.123.148.0/22
185.143.64.0/22
193.3.37.0/24
212.146.160.0/19
IPv6:
2a06:dac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212661
Signature Algorithm: sha256WithRSAEncryption
32:58:5f:6e:04:20:bf:99:64:47:1a:08:4c:e9:d5:69:04:03:
d8:2d:74:e4:f2:88:3b:8f:50:f9:d1:f3:3a:d5:05:91:c5:2e:
0f:de:ff:3a:c3:b4:80:cf:0e:c6:42:30:c3:cc:70:42:2b:b5:
f7:ad:8d:b7:6d:28:3f:e9:28:87:fc:c1:b4:a2:aa:6e:46:f7:
a9:f1:a3:2b:ef:f5:df:d2:35:fe:9a:7e:25:9f:71:ef:e3:3a:
0e:4c:51:7d:99:8e:c4:ff:7f:27:a5:c5:04:34:92:fc:d8:eb:
b6:ec:96:2c:ec:df:5e:dc:15:d3:f8:5f:e8:52:03:45:fd:bb:
e3:e5:19:e7:27:28:5b:1b:a0:66:74:fd:9b:c1:a6:2e:c9:b1:
de:0d:31:95:30:22:24:1a:01:56:92:aa:06:9f:c4:b6:be:ad:
7c:bd:ba:a0:08:30:0a:c4:45:44:70:b0:6e:02:7e:b8:f2:96:
e9:83:1d:b1:40:a2:4c:5e:ca:f2:b3:2c:10:f4:b5:7b:9f:9c:
4a:b0:88:89:c5:31:cd:58:e8:c9:de:56:33:58:ba:40:c6:33:
ba:53:b8:54:af:ab:36:5a:a4:cc:7d:6a:53:24:9d:f6:ed:31:
77:0b:5b:5e:d4:1f:be:4c:a5:cd:5a:7b:59:8b:f6:e3:9b:27:
f0:8f:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:05:41 2024 by rpki-client on console-fra.rpki-client.org