Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer (raw, json)
Hash identifier: FDM97ZXnwYICXIQJIW+OQQPQ+EuMakNAP1dNM7GxcsI=
Subject key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B683DFCC5D533B5EADD58C44BD41CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39150
AS: 209207
IP: 79.133.96.0/22
IP: 79.133.104.0/22
IP: 79.133.112.0/21
IP: 91.196.136.0/22
IP: 93.179.64.0 -- 93.179.87.255
IP: 93.179.92.0/22
IP: 93.179.120.0/22
IP: 95.85.80.0/21
IP: 95.181.136.0 -- 95.181.147.255
IP: 95.181.208.0/21
IP: 95.181.240.0/21
IP: 109.196.128.0/20
IP: 128.127.144.0/22
IP: 178.57.71.0/24
IP: 185.13.32.0/22
IP: 185.19.176.0/22
IP: 188.68.4.0/22
IP: 195.182.8.0/24
IP: 2a04:8680::/29
IP: 2a09:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:83:df:cc:5d:53:3b:5e:ad:d5:8c:44:bd:41:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:a1:f4:7f:81:59:e5:e0:fc:bc:3c:5c:00:
ef:54:1a:fb:fa:eb:61:6c:b0:60:33:e7:d5:6b:5a:
10:b6:41:6b:36:51:fd:19:9f:fd:ae:d4:78:44:a3:
1d:c2:28:ce:5d:90:fe:0e:da:c2:c9:e3:85:f9:d1:
07:2f:8d:0e:9c:e7:3f:1d:5d:c9:8d:c0:ec:af:f0:
81:fd:0c:57:9a:94:b1:7e:a5:09:49:81:e5:4d:0f:
37:eb:e3:6c:96:5f:c6:6c:e5:3a:07:7c:e9:43:2a:
d4:e9:21:3f:ce:a7:e2:23:5e:c2:7a:62:d8:a2:5a:
c3:3d:8e:3b:e7:50:11:78:5f:5a:b7:92:ad:7d:c0:
7a:77:e8:a0:81:a0:7e:bb:87:c4:be:b3:88:e6:05:
aa:b2:41:02:9d:85:b5:96:46:94:8b:23:f9:5a:d0:
06:a4:38:fa:69:81:76:5a:04:9a:9c:41:62:6c:08:
96:29:1f:76:fa:00:11:07:60:2d:02:6e:4d:cb:27:
1a:08:f5:e7:5e:8b:73:fb:ce:9c:78:b7:6d:00:f0:
29:8a:ba:09:2c:8b:98:0d:b5:10:76:68:ef:3d:5d:
60:b7:8b:44:9e:2e:ba:40:b7:03:71:85:d1:c8:57:
d5:1a:58:75:de:87:4f:2b:d5:ee:cb:45:23:8b:34:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/22
79.133.104.0/22
79.133.112.0/21
91.196.136.0/22
93.179.64.0-93.179.87.255
93.179.92.0/22
93.179.120.0/22
95.85.80.0/21
95.181.136.0-95.181.147.255
95.181.208.0/21
95.181.240.0/21
109.196.128.0/20
128.127.144.0/22
178.57.71.0/24
185.13.32.0/22
185.19.176.0/22
188.68.4.0/22
195.182.8.0/24
IPv6:
2a04:8680::/29
2a09:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39150
209207
Signature Algorithm: sha256WithRSAEncryption
37:2d:88:dc:1b:9a:cc:d0:2c:71:94:7a:d1:70:af:cf:bc:7b:
ab:03:24:88:7e:13:1a:c9:ab:62:90:aa:6e:37:92:7e:76:83:
7b:8c:df:e9:32:7c:0f:fd:9c:0d:83:8c:80:09:f2:cf:c4:c2:
f7:38:8d:f9:a2:9f:b7:09:8c:16:16:64:ed:c0:b6:18:c7:2a:
57:1e:f7:9b:aa:1e:18:d7:10:6a:36:45:90:0f:b6:32:62:01:
42:73:75:f9:d3:96:2f:89:96:56:f4:53:bd:46:01:41:73:dd:
64:0a:51:65:80:09:d0:cb:91:78:27:a5:93:fc:7a:db:eb:c9:
f2:7f:60:93:a0:af:69:2a:b8:51:4b:50:8f:1b:d2:e7:b6:29:
06:a0:83:7c:6c:bf:b3:59:0b:ce:2d:ce:1b:eb:a1:56:aa:6d:
6e:43:6d:c8:c6:33:19:94:77:9e:6e:b4:0b:3b:c7:53:0b:24:
33:76:e9:e2:ee:65:19:13:64:82:63:41:69:a6:f6:81:6d:a5:
7a:92:7d:fe:f1:d4:48:75:a1:4d:cb:c6:ad:d9:50:2a:29:67:
90:ea:5a:23:c6:20:82:80:e7:49:cc:f3:90:4a:8a:9d:42:31:
4d:f0:69:aa:91:a7:e1:29:31:cc:19:67:e3:5b:9b:c9:cc:55:
93:58:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:20 2024 by rpki-client on console-ams.rpki-client.org