Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
File: i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer (raw, json)
Hash identifier: QPhG1pGGv7Yogz09EGcSXE/6bt9uDBdRnOe6j39T20k=
Subject key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC725D7065707BB21EBDCA6C8B40DDB97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8987
AS: 9059
AS: 39111
IP: 46.51.128.0/17
IP: 46.137.0.0/16
IP: 79.125.0.0/17
IP: 87.238.80.0/21
IP: 176.32.64.0/18
IP: 176.34.0.0/16
IP: 178.236.0.0/20
IP: 185.48.120.0/22
IP: 2a05:d000::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:d7:06:57:07:bb:21:eb:dc:a6:c8:b4:0d:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:8c:c4:13:26:bc:0e:fa:7f:50:6c:14:cf:
fe:6d:a0:9b:50:10:04:8e:55:d9:58:35:5a:3a:f5:
9f:c6:35:94:29:4b:97:98:bb:4a:32:9d:b8:fa:ab:
46:65:8d:99:4b:89:81:0f:77:31:43:c4:51:7e:0e:
af:3f:53:e7:fb:56:5c:8a:42:bb:50:68:b6:0d:cb:
00:77:89:ef:aa:96:fb:22:47:06:17:22:4a:1a:13:
a8:a8:00:a1:69:f5:cd:96:99:d7:85:47:6a:33:7d:
74:bb:65:43:8c:5a:d3:1e:e8:01:ac:ab:82:a3:4f:
a8:8a:72:ef:6c:cc:a0:8c:2f:4f:53:1c:42:b3:e6:
cb:7c:47:d8:35:60:aa:85:f1:30:38:77:86:a3:db:
e7:a6:cb:ef:c4:39:eb:20:e5:aa:fc:09:57:df:cc:
c3:31:d8:bb:16:08:fb:4b:84:9e:f8:a7:78:d3:68:
c9:ac:91:46:4f:b7:a0:c0:21:d5:0e:e5:25:27:0f:
57:38:b1:6b:cb:06:bf:2b:06:08:da:84:8d:c5:d4:
42:ff:25:2c:55:f0:e6:cf:2c:3e:b5:d0:ba:a5:f0:
31:8f:9a:5b:4b:80:7e:e7:d4:6a:4e:58:a0:66:b7:
24:68:cb:fc:8c:17:bc:3f:cd:7f:ee:df:a2:db:5e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8987
9059
39111
Signature Algorithm: sha256WithRSAEncryption
38:d1:9b:e0:da:ae:ae:01:d4:69:e6:76:4b:af:20:d9:10:5e:
5d:ee:c3:aa:c2:aa:5f:d4:50:55:56:08:ea:e7:f7:8a:1b:82:
da:13:a9:76:18:5a:6a:13:58:05:3e:08:7c:e8:91:fe:20:d5:
0d:2b:f5:5a:25:07:0a:44:67:44:40:fe:28:a6:57:cd:7d:0e:
9b:58:73:6e:bf:f4:ba:51:00:95:36:65:87:04:70:d5:5a:e5:
73:21:63:0d:8b:77:75:e5:d3:a0:96:5f:73:7d:8d:f3:ca:48:
6c:6b:2c:8e:dc:f1:62:59:c7:0c:b5:38:67:bc:4f:ff:a6:ed:
df:90:ba:2e:7b:7a:2b:75:53:02:05:3e:77:a2:c1:cc:da:82:
30:5c:94:8d:e3:ce:73:b7:bc:e9:9c:e1:3d:a0:70:bc:f0:42:
23:13:0a:de:03:28:e1:a4:11:7a:d9:ac:86:4f:d4:35:bb:93:
5b:ba:e1:8b:ca:ed:3a:eb:d2:be:be:ae:f0:30:25:ff:5c:6e:
be:9c:a7:41:11:36:b2:50:f6:21:5a:6e:cc:ad:3d:c0:8a:cf:
cb:2b:a5:d0:b2:bf:c2:b2:15:ea:40:d7:25:27:74:e8:a7:ca:
b5:0c:ea:43:70:d6:7b:8f:d7:34:a8:36:c1:e2:a7:ef:ad:ee:
28:8a:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:52:55 2024 by rpki-client on console-ams.rpki-client.org