Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
File: i3-BpueC4hEYnE805Fm0Imx19KY.cer (raw, json)
Hash identifier: 6RAQ+FEakvZB3kx0ptWj9KkVz/oJk+30NdqE1SS4cIk=
Subject key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7780445497109648FE141E8A12117
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43511
AS: 199236
IP: 45.86.116.0/22
IP: 45.87.196.0/22
IP: 45.91.44.0/22
IP: 45.128.164.0/22
IP: 45.128.172.0/22
IP: 89.37.88.0/22
IP: 91.194.248.0/23
IP: 91.211.240.0/22
IP: 185.4.120.0/22
IP: 193.177.216.0/22
IP: 194.113.24.0/22
IP: 195.54.172.0/23
IP: 2a02:7040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:78:04:45:49:71:09:64:8f:e1:41:e8:a1:21:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:0e:43:76:c7:cf:22:bd:19:36:05:e7:f9:
d6:5d:f2:b7:a3:f3:06:47:c9:2d:63:15:f8:d8:74:
1d:a2:e3:53:7b:6e:fd:cf:3e:de:3c:08:5a:d2:39:
2e:e1:44:0f:05:44:de:e2:5a:8c:6b:b4:fa:1b:73:
fa:b3:a8:16:95:2e:db:05:59:9d:b9:6b:2d:b5:7d:
d4:bd:e2:26:7e:67:3e:0c:c4:a1:02:60:b9:e8:8a:
e7:59:b0:39:eb:bf:47:63:c9:6f:2a:fa:f8:9a:8c:
a1:11:1a:f6:55:da:19:bd:32:76:4d:2e:a7:14:da:
17:2e:2c:a7:9b:91:ac:62:0c:0e:6c:4f:d4:e6:20:
6d:b4:08:20:43:db:dc:4e:ec:10:3a:d2:8b:20:4b:
c5:32:a0:c5:3c:fa:c5:b4:ff:12:c0:86:db:13:28:
33:11:6f:45:2a:ba:28:49:57:05:0e:28:1b:9f:c3:
57:37:d9:00:b6:1a:d1:e9:00:72:8b:79:82:cc:7c:
20:49:e5:41:7b:3d:1e:9e:3d:e5:b5:be:be:bc:cb:
2b:07:2c:8b:af:20:33:7c:8e:ce:c6:09:89:35:b8:
83:d7:2d:00:13:5f:11:45:91:8a:c7:9d:8b:48:aa:
40:dd:1d:7c:13:34:da:d7:0f:25:0e:cf:83:83:d6:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.116.0/22
45.87.196.0/22
45.91.44.0/22
45.128.164.0/22
45.128.172.0/22
89.37.88.0/22
91.194.248.0/23
91.211.240.0/22
185.4.120.0/22
193.177.216.0/22
194.113.24.0/22
195.54.172.0/23
IPv6:
2a02:7040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43511
199236
Signature Algorithm: sha256WithRSAEncryption
12:86:5c:11:7f:1d:1d:b3:c0:48:ee:7c:f5:91:2a:8b:e6:2d:
22:42:7f:6e:3c:b8:fd:f5:5d:04:9d:89:ca:c2:79:8c:f5:96:
84:9a:5e:19:ec:d4:fa:3e:fe:33:c2:b5:84:80:60:4d:e4:5d:
eb:3e:bb:b5:73:3c:48:a6:b5:6c:54:97:08:32:62:6c:50:8b:
d5:21:fc:94:f9:5a:63:2b:07:78:eb:c2:a7:9a:67:2e:6e:a7:
0b:ec:71:41:04:43:61:c2:ba:2d:a5:0c:e2:20:8a:32:d5:31:
bf:f0:91:d6:c4:82:6f:fc:92:b4:2f:81:a2:c2:cd:22:f9:51:
f0:c7:48:f6:bd:c4:e2:18:c0:69:65:67:ce:91:62:b2:2f:87:
59:2c:bc:67:ae:b5:76:ee:74:c7:52:bb:91:ea:ca:62:ea:eb:
de:2a:2d:5f:73:17:05:60:61:3b:dd:a8:96:08:34:f0:07:d9:
95:5e:df:79:30:d6:d4:da:41:08:b0:37:bd:a3:ab:03:1a:8b:
8d:04:60:5f:a3:9c:32:a7:2a:68:32:98:8e:31:f1:c9:6f:a0:
23:60:a6:bd:6a:50:de:da:82:35:24:f2:36:c7:53:97:45:f2:
89:46:08:a2:72:c5:19:b5:32:d8:7f:db:9a:f8:8c:d7:63:8a:
36:1e:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:16 2024 by rpki-client on console-ams.rpki-client.org