Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
File: olSp86JmUT3caTXYvgIuflIw6hA.cer (raw, json)
Hash identifier: IAOzCbb/w1Zl6dbJr+4k6gfdOEqpDWM9cXc2UW2cnTk=
Subject key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D85E9DB06595A5DEC0DEC0C4A311B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8486
AS: 15440
AS: 42549
AS: 47929
AS: 209989
IP: 5.133.64.0/22
IP: 45.82.32.0/22
IP: 45.95.32.0/22
IP: 45.146.200.0/22
IP: 77.241.192.0/20
IP: 79.142.112.0/20
IP: 89.249.80.0/20
IP: 92.62.128.0/20
IP: 185.11.24.0/22
IP: 185.65.48.0/22
IP: 185.216.208.0/22
IP: 195.14.160.0/19
IP: 213.197.128.0/18
IP: 217.117.16.0/20
IP: 2001:1ab8::/30
IP: 2a03:1960::/32
IP: 2a0d:5000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:85:e9:db:06:59:5a:5d:ec:0d:ec:0c:4a:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:2b:b5:99:a5:92:af:d6:7b:c2:56:73:57:
3e:72:94:02:e2:11:7b:0a:a6:85:c3:0a:fc:2a:e3:
d5:ef:25:17:05:bf:2e:ac:7c:8c:e0:98:7e:5b:35:
f8:0a:da:e6:43:8a:9e:9f:16:93:24:47:8c:12:2d:
2b:ce:4b:08:73:06:15:43:3c:ef:9b:bd:81:58:98:
22:e6:ce:f9:40:f2:54:8a:09:92:c3:4b:48:ff:6e:
2a:b0:da:de:75:8a:27:eb:63:ad:c7:74:8d:72:dd:
f7:79:a0:26:e3:b0:4c:54:ac:39:67:5d:db:bf:c3:
9d:93:fc:09:23:f2:b7:56:c0:a2:2e:ec:aa:30:fb:
20:74:ed:dc:e5:9a:63:ef:26:3c:0e:8b:09:bc:f5:
cf:f1:d5:95:fd:8e:ab:c0:f7:d3:36:ad:8c:47:d8:
e9:f7:77:c7:2f:d4:12:82:f1:41:29:a5:b9:f4:a8:
a7:c7:09:be:71:03:7c:a3:b2:25:39:2b:57:fb:6d:
82:23:1d:e5:fa:8d:98:0d:ee:57:28:bd:ba:f7:9c:
e4:fa:78:c3:9a:40:ce:f1:10:58:07:d4:85:06:46:
3c:e1:ea:e3:ed:b6:4f:13:7f:e4:93:87:6b:18:f4:
a8:5f:fd:4b:55:b6:24:a3:9f:33:83:7b:2d:d7:0a:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.64.0/22
45.82.32.0/22
45.95.32.0/22
45.146.200.0/22
77.241.192.0/20
79.142.112.0/20
89.249.80.0/20
92.62.128.0/20
185.11.24.0/22
185.65.48.0/22
185.216.208.0/22
195.14.160.0/19
213.197.128.0/18
217.117.16.0/20
IPv6:
2001:1ab8::/30
2a03:1960::/32
2a0d:5000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8486
15440
42549
47929
209989
Signature Algorithm: sha256WithRSAEncryption
44:80:1d:14:04:b8:e3:0c:9c:5c:3a:7d:40:c7:8b:a6:46:7c:
00:2f:b1:69:2c:80:c7:36:42:e6:10:1a:4f:ef:fa:16:a3:85:
d9:da:5c:10:5d:0b:fd:1f:a6:28:37:60:e5:62:2f:5c:ac:39:
d3:0f:d4:e0:f5:73:2a:b8:21:0b:c0:2c:fe:a6:3d:df:12:99:
57:f6:d4:4e:8f:6c:7d:cc:61:55:5a:43:d4:79:2b:0a:ce:a5:
72:96:66:5e:a1:8f:11:0f:cc:9b:cc:68:22:68:45:a7:f2:ff:
33:bd:7f:fa:8d:a8:2b:6c:29:1a:86:e3:65:0f:5e:a9:ce:c0:
0c:27:2b:ca:45:61:5b:a6:7c:0e:b8:6a:4f:28:e7:a8:b1:1f:
d9:49:5d:fe:63:c3:9b:f7:99:7f:80:ef:d9:ad:51:ee:00:78:
fa:d6:87:cc:53:2c:07:91:1b:bb:bc:59:7d:9c:c5:25:e0:48:
c4:26:45:24:93:78:44:a0:89:ed:9e:81:0c:13:92:2f:74:96:
93:21:d2:57:a8:45:4d:9c:35:89:71:f4:d4:ca:36:9d:db:f8:
c2:62:5a:99:42:a7:07:44:aa:ce:a5:bd:5f:61:2d:07:33:84:
00:9b:bd:7a:54:eb:22:d9:ec:78:00:28:0b:d5:35:b4:76:c8:
e2:f1:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 18:31:51 2024 by rpki-client on console-fra.rpki-client.org