Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
File: fQakK7JEblHxkuo3W99-7FpRx38.cer (download)
Hash identifier: 7BLSNf+rePKqg6zhpI3+xi9tV/OR9GpnZ/kGRcqXfrE=
Subject key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD808B16ED51B160D6F7A262B37074
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate valid until: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
1: AS: 15723
2: IP: 5.10.240.0/20
3: IP: 5.178.0.0/20
4: IP: 37.128.200.0/21
5: IP: 46.23.96.0/20
6: IP: 62.217.128.0/19
7: IP: 85.158.144.0/21
8: IP: 88.151.192.0/21
9: IP: 109.205.208.0/21
10: IP: 164.215.96.0/21
11: IP: 185.81.216.0/22
12: IP: 188.64.8.0/21
13: IP: 2a00:48c0::/32
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:80:8b:16:ed:51:b1:60:d6:f7:a2:62:b3:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:77:cb:10:78:71:be:cc:1f:a0:6e:17:c6:
19:1f:00:79:7c:63:c1:5c:9b:a7:64:97:72:08:a1:
b3:b0:25:6f:e9:4d:ba:e1:3a:48:77:2d:1b:ae:7f:
3b:cc:24:85:c8:82:03:db:61:73:70:0d:c8:27:7f:
01:57:fe:58:c5:65:34:b2:04:95:5f:2f:9e:4e:51:
ef:46:0f:78:d2:23:59:48:2b:d9:b4:00:15:63:31:
a3:6f:ca:10:91:72:91:74:61:cc:24:7e:f1:26:cd:
e9:99:82:56:3d:c9:6e:8c:c0:2d:09:59:04:82:dd:
30:00:92:bb:d4:76:57:40:e2:7f:15:0c:dd:78:88:
d0:67:2c:46:ac:ba:f8:de:c1:26:4c:63:8e:fa:8c:
39:3a:60:bf:8b:9e:80:f2:8f:9d:38:b5:66:9f:eb:
21:76:9b:58:a3:73:bd:21:86:0e:36:f3:42:71:33:
88:dd:a2:a0:97:42:11:aa:08:c4:4a:04:d2:db:e7:
45:52:f6:2b:4c:70:ef:94:98:e1:88:b8:3c:19:7a:
14:92:e2:30:9b:48:22:68:6d:15:6d:c3:f1:02:47:
d7:a6:f0:17:8a:c1:c7:fb:54:26:c8:c1:0a:7c:35:
07:e9:3b:15:bd:36:5c:aa:5a:60:a0:ea:4c:47:7c:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/20
5.178.0.0/20
37.128.200.0/21
46.23.96.0/20
62.217.128.0/19
85.158.144.0/21
88.151.192.0/21
109.205.208.0/21
164.215.96.0/21
185.81.216.0/22
188.64.8.0/21
IPv6:
2a00:48c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15723
Signature Algorithm: sha256WithRSAEncryption
a5:67:47:74:b7:60:f5:6f:12:d9:5a:af:d7:65:ab:15:b5:13:
6c:9c:68:77:27:5c:f6:61:c7:37:61:67:5f:14:2b:bd:61:16:
89:ab:a0:77:37:48:a6:2b:9d:df:59:0d:32:79:c0:16:ed:5f:
d0:7c:41:38:47:8a:2f:07:e6:9e:04:93:76:63:76:18:92:0c:
ac:e0:8e:5d:57:f7:72:f2:e9:ea:5c:6a:e5:d6:77:40:8e:96:
eb:50:9a:d7:79:03:79:be:72:a9:25:f8:0e:16:db:bc:17:dc:
e6:99:16:c4:66:51:c1:68:78:64:1b:97:9f:06:fe:14:8c:fb:
87:32:07:23:65:7e:40:91:7e:19:69:81:89:0d:14:c0:f6:3d:
7a:89:8c:57:bb:6f:ec:a2:a2:e8:c9:e9:1a:28:f8:2f:be:b6:
06:c3:52:22:54:8f:2f:af:06:6d:d5:46:24:db:fe:0e:2e:5f:
28:99:1f:f0:cf:ed:67:e8:64:3a:d5:4d:21:b1:1a:5d:4d:c1:
33:47:b0:4c:3a:e0:65:e3:43:11:35:47:13:ac:fa:12:95:ce:
17:1b:58:84:50:23:eb:4e:a1:6c:72:69:c3:62:42:56:5a:47:
8f:48:bd:19:7e:21:69:22:51:a8:da:46:6c:c7:7e:dc:78:b7:
1d:ed:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 8 05:06:31 2023 by rpki-client.