Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer (raw, json)
Hash identifier: HfqkzLdrQkLjz7Eg5RQHlDr5jRu9JTIW3sTX6JovSmM=
Subject key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938EBB559C7504BB81B52B92A2DBFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15941
AS: 20818
AS: 47624
IP: 85.217.224.0/19
IP: 91.92.72.0 -- 91.92.103.255
IP: 91.206.138.0/23
IP: 91.223.66.0/24
IP: 91.245.192.0/24
IP: 185.111.212.0/22
IP: 185.163.140.0/22
IP: 185.225.84.0/22
IP: 185.229.252.0/22
IP: 193.37.238.0/24
IP: 194.169.223.0/24
IP: 194.169.230.0/24
IP: 194.169.237.0/24
IP: 194.169.242.0/24
IP: 213.232.88.0/22
IP: 2a0b:f800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:bb:55:9c:75:04:bb:81:b5:2b:92:a2:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:80:23:85:ae:18:04:5f:03:14:9c:c0:00:
95:1e:2f:7d:67:51:8f:dc:e7:11:ff:41:7f:85:d2:
26:89:bb:22:30:d7:70:70:77:f5:10:78:00:3c:5c:
fd:a5:c4:3d:0d:49:25:ad:29:01:1c:b2:5c:10:75:
45:2d:9a:80:f8:2b:db:85:c7:12:e0:d9:ca:ff:17:
e3:ae:5b:05:cc:36:c5:7b:69:b1:4e:6b:7b:9b:19:
01:54:3b:28:4b:e6:0d:45:2b:83:fa:8c:d0:02:56:
45:b1:57:d6:54:93:e5:f8:32:40:a6:55:08:aa:ee:
60:dd:77:71:45:03:02:05:cd:cd:af:d2:e3:e5:99:
e0:56:b1:fa:5d:a0:91:96:77:1a:72:ec:42:e4:cb:
ac:b3:1f:38:da:b2:bd:03:97:43:82:2c:84:24:b4:
49:13:8c:b3:b1:4f:ce:56:3d:08:06:b1:d3:50:dd:
4f:e8:1d:30:88:35:6b:8f:ee:5f:39:f4:60:04:1e:
10:f9:dc:08:a6:76:41:06:40:82:ac:02:ea:8c:63:
65:48:13:91:6f:c7:53:b6:1d:04:99:f7:8d:39:12:
76:bc:e5:c8:75:04:9c:07:81:f5:37:c9:15:3a:cc:
e7:9c:34:7c:96:b0:a3:fa:b5:60:db:2f:2a:ca:d4:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.224.0/19
91.92.72.0-91.92.103.255
91.206.138.0/23
91.223.66.0/24
91.245.192.0/24
185.111.212.0/22
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
213.232.88.0/22
IPv6:
2a0b:f800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15941
20818
47624
Signature Algorithm: sha256WithRSAEncryption
7c:21:64:b4:38:b8:5f:1b:df:c1:6b:a9:1d:25:da:f8:66:cb:
dd:31:fc:57:c7:9b:e8:a7:8d:5b:3a:2a:7d:27:99:e7:01:68:
c3:cd:d0:ea:56:f9:61:33:64:68:c7:ac:ce:6d:9d:72:ba:a2:
10:c0:cd:04:13:50:cc:78:ff:06:4e:97:72:e5:1b:0b:6e:51:
12:1f:ed:ac:de:a7:53:14:71:b2:65:3f:90:6b:72:85:81:91:
63:5d:d8:11:87:34:d1:56:0d:ea:24:53:28:1b:50:bb:58:35:
ed:c7:8b:d5:79:5a:9b:bf:5c:9c:99:9c:70:1c:93:ce:1f:04:
9a:fb:c0:0d:9e:e2:2a:7d:8c:84:1c:a2:f2:fb:e4:3a:7e:e5:
82:54:d6:0c:a7:c3:49:e8:91:bc:34:51:60:d9:38:90:a4:7d:
71:02:5d:29:ce:49:ff:2e:58:ce:ca:c1:51:9a:b8:71:de:ab:
34:2b:3c:ca:ee:5d:0f:73:9a:d2:aa:28:45:86:7c:0a:07:79:
91:aa:4e:11:e0:28:d8:cf:7f:8b:f9:2d:b1:ae:90:62:d7:35:
a2:95:c1:ae:84:e1:6d:38:72:3b:08:d2:63:da:83:a6:36:02:
2e:e5:e7:50:f4:b9:59:f1:fd:dd:bd:24:4f:14:0a:cf:a4:e1:
44:18:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:23 2024 by rpki-client on console-ams.rpki-client.org