Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
File: fQakK7JEblHxkuo3W99-7FpRx38.cer (raw, json)
Hash identifier: F4j8OD4gSFSmw/ZfZ9tb28GxBzIucjl+RDHPPipn/4Y=
Subject key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC94BDCE8EC8D770F44DFDEEEAFE84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15723
IP: 5.10.240.0/20
IP: 5.178.0.0/20
IP: 37.128.200.0/21
IP: 46.23.96.0/20
IP: 62.217.128.0/19
IP: 85.158.144.0/21
IP: 88.151.192.0/21
IP: 109.205.208.0/21
IP: 164.215.96.0/21
IP: 185.81.216.0/22
IP: 188.64.8.0/21
IP: 2a00:48c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:94:bd:ce:8e:c8:d7:70:f4:4d:fd:ee:ea:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:77:cb:10:78:71:be:cc:1f:a0:6e:17:c6:
19:1f:00:79:7c:63:c1:5c:9b:a7:64:97:72:08:a1:
b3:b0:25:6f:e9:4d:ba:e1:3a:48:77:2d:1b:ae:7f:
3b:cc:24:85:c8:82:03:db:61:73:70:0d:c8:27:7f:
01:57:fe:58:c5:65:34:b2:04:95:5f:2f:9e:4e:51:
ef:46:0f:78:d2:23:59:48:2b:d9:b4:00:15:63:31:
a3:6f:ca:10:91:72:91:74:61:cc:24:7e:f1:26:cd:
e9:99:82:56:3d:c9:6e:8c:c0:2d:09:59:04:82:dd:
30:00:92:bb:d4:76:57:40:e2:7f:15:0c:dd:78:88:
d0:67:2c:46:ac:ba:f8:de:c1:26:4c:63:8e:fa:8c:
39:3a:60:bf:8b:9e:80:f2:8f:9d:38:b5:66:9f:eb:
21:76:9b:58:a3:73:bd:21:86:0e:36:f3:42:71:33:
88:dd:a2:a0:97:42:11:aa:08:c4:4a:04:d2:db:e7:
45:52:f6:2b:4c:70:ef:94:98:e1:88:b8:3c:19:7a:
14:92:e2:30:9b:48:22:68:6d:15:6d:c3:f1:02:47:
d7:a6:f0:17:8a:c1:c7:fb:54:26:c8:c1:0a:7c:35:
07:e9:3b:15:bd:36:5c:aa:5a:60:a0:ea:4c:47:7c:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/20
5.178.0.0/20
37.128.200.0/21
46.23.96.0/20
62.217.128.0/19
85.158.144.0/21
88.151.192.0/21
109.205.208.0/21
164.215.96.0/21
185.81.216.0/22
188.64.8.0/21
IPv6:
2a00:48c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15723
Signature Algorithm: sha256WithRSAEncryption
9d:5f:45:ff:45:5c:d0:7b:b5:8d:d3:78:40:ee:ea:71:52:0c:
e5:ad:b6:77:c0:8d:ef:47:5d:03:38:79:e6:59:19:ab:04:72:
6c:72:81:07:a2:d9:82:8b:fa:17:4c:ba:5a:e6:d9:30:d1:36:
96:2a:0f:8d:fe:80:71:9e:7f:58:53:5b:a8:f1:5a:83:8f:65:
17:b5:3a:4a:1a:c4:86:93:6c:e4:79:70:a8:f8:23:d0:fd:3c:
aa:69:13:04:71:d6:94:43:59:d7:29:1e:f6:b9:b3:06:13:56:
ac:4e:57:85:ae:5f:a7:e9:93:4b:b6:86:aa:fe:b9:5b:66:43:
13:0d:f7:51:e6:e6:c1:45:54:6b:c8:16:34:e0:42:8e:86:d6:
7f:93:ad:66:95:09:86:40:e5:9e:34:f6:bb:05:24:03:9c:c0:
d7:94:33:92:3c:79:28:c3:f8:c7:1c:c5:8c:f6:09:ad:89:f6:
42:6a:b7:d5:ae:5e:31:3d:fe:80:a0:79:c2:63:79:23:18:5c:
57:c4:94:4a:d6:74:c1:90:66:ae:cb:00:48:2b:41:3c:8e:69:
9a:16:f2:c0:00:df:93:82:ce:18:db:2b:49:f5:67:2b:cc:e0:
22:df:f0:4b:d6:37:16:3e:9c:0a:f3:2e:27:dd:ae:4a:64:53:
f8:67:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:00 2024 by rpki-client on console-ams.rpki-client.org