Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer (raw, json)
Hash identifier: 4i20khrfK25jgCv+mRDnRBlKrAS5iZZyslozwitMpVo=
Subject key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEF125D653341D6FFB93A50E9CFF28BDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Feb 2024 09:36:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41155
AS: 207787
IP: 45.91.151.0/24
IP: 45.93.244.0/22
IP: 45.156.72.0/22
IP: 45.158.136.0/22
IP: 77.75.231.0/24
IP: 109.107.134.0/24
IP: 185.34.103.0/24
IP: 185.89.23.0/24
IP: 185.222.215.0/24
IP: 188.244.116.0/24
IP: 194.0.193.0/24
IP: 194.0.221.0/24
IP: 194.0.223.0/24
IP: 194.1.200.0/24
IP: 2a0d:8e80::/29
IP: 2a0e:2940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:12:5d:65:33:41:d6:ff:b9:3a:50:e9:cf:f2:8b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 09:36:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:43:69:d2:f6:bf:52:60:cb:b5:94:12:7d:
d7:84:c7:27:d4:71:f5:7f:8c:33:b6:33:bc:bb:3c:
31:4d:16:63:6e:60:c9:38:81:fb:78:09:5e:c9:85:
69:3e:b9:ae:00:a3:46:4e:83:b7:24:b8:f2:6a:f3:
d0:50:6e:b6:91:31:be:73:55:79:1a:91:53:2e:1f:
6a:32:e0:7e:cc:cb:fe:ec:cb:6f:2a:d8:63:15:9a:
52:2a:77:2b:4f:43:e9:54:e8:63:f3:e0:0a:f3:e1:
c1:8c:ff:d4:9b:d5:bf:2a:f0:0c:97:af:03:34:08:
56:49:e9:93:1c:f2:5d:56:cf:ed:f2:3f:91:8c:3d:
0c:e8:1a:18:e4:df:3e:22:43:d4:93:10:f7:de:13:
ab:46:f5:61:e3:d4:34:b3:c5:05:d0:14:3e:81:f6:
24:ce:99:18:89:b7:cb:56:be:71:38:a5:49:89:79:
9d:e9:68:f6:cb:4c:c7:e6:eb:8f:84:d2:52:f3:f1:
b3:99:39:48:35:cb:43:ce:10:e0:c0:f0:e2:e4:06:
32:58:eb:50:97:80:d0:fe:07:4f:1e:9b:19:a7:46:
f7:34:73:0e:f2:d5:f3:13:4e:54:56:da:d8:5e:da:
5c:6f:12:42:5f:1d:2d:8f:57:8a:94:ef:12:ef:8f:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
45.93.244.0/22
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80::/29
2a0e:2940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41155
207787
Signature Algorithm: sha256WithRSAEncryption
3b:e8:24:46:db:bc:96:63:37:60:e1:26:4a:9d:29:8d:7c:85:
d5:3c:94:17:c3:1a:6f:98:98:59:4e:b8:2e:d7:e6:e4:a5:ae:
52:99:6f:7b:36:b4:f5:88:df:f4:d1:94:74:03:04:21:4b:95:
f8:57:66:ac:ff:26:a0:0f:df:b0:cc:a0:9b:bf:94:06:f4:3c:
6c:d0:20:dd:ca:04:a1:04:6f:c7:76:83:37:76:6a:29:bb:0a:
61:37:83:08:a1:98:71:68:de:22:6d:38:0a:fd:85:ef:83:0a:
af:39:04:06:5f:c9:50:2e:92:86:67:1d:e7:81:2c:ef:8a:54:
58:8e:62:11:13:33:30:c1:f8:48:28:b1:58:dc:62:27:4a:08:
a2:0c:31:b5:5b:76:9b:ed:66:e7:9d:ed:92:8e:83:2b:ea:2e:
2d:cb:1b:89:63:bf:23:1e:ab:64:df:4d:57:fc:b8:cc:5a:ef:
00:87:08:18:92:e3:06:3e:3e:76:0e:ea:21:6a:c9:d8:07:f7:
2c:48:d9:19:1f:6a:33:42:1e:ea:73:b0:02:38:6d:f9:00:02:
7b:c4:ef:34:8d:2f:06:b6:4e:b5:f1:fe:dd:fe:f3:02:06:15:
9b:48:ca:b0:32:96:bd:a6:57:3f:e5:3b:7e:5e:54:ac:b2:00:
44:42:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:52:50 2024 by rpki-client on console-fra.rpki-client.org