Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer (raw, json)
Hash identifier: NNYkay2YsIMdXFsRU9xfxrhXv0J3mSD18jc7smUSHos=
Subject key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC21FDA30C5E94E88767E58B562500
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24581
AS: 24989
AS: 34972
AS: 59991
AS: 197539
IP: 46.183.152.0/21
IP: 88.84.128.0/19
IP: 89.202.0.0/17
IP: 185.1.102.0/24
IP: 193.110.116.0/22
IP: 217.68.144.0/20
IP: 217.79.208.0/20
IP: 2001:7f8:bd::/48
IP: 2001:4c68::/32
IP: 2a01:5000::/32
IP: 2a02:20a8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:21:fd:a3:0c:5e:94:e8:87:67:e5:8b:56:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca77c708af0ba1f81549c9f87089559390167a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:d8:ea:6a:f1:71:1d:37:4c:8b:0d:84:c3:
fa:3b:a3:34:79:60:4d:ab:87:4b:32:db:5d:61:61:
07:6d:05:de:ac:43:3c:79:ec:7c:eb:02:de:0a:e0:
e5:ae:36:13:55:4f:6b:91:3a:3d:d6:d1:6b:2a:76:
3e:6a:24:95:be:f5:54:b9:91:b6:db:b4:e3:4e:c2:
f6:d5:5b:8b:16:30:de:ee:44:50:1b:34:2f:a9:11:
18:c4:59:34:3c:13:bc:c3:f4:57:f8:47:32:a1:fc:
52:fa:d4:9f:13:f9:ed:b9:00:9e:5e:39:cc:32:aa:
76:24:90:39:c0:02:3c:b3:67:0b:5d:7b:62:46:28:
09:5f:84:ea:ce:bc:39:5f:3a:d5:1d:28:de:3d:67:
24:ef:a5:55:81:bf:58:48:be:d6:0e:68:72:b2:3c:
d1:ad:2c:46:4f:3f:82:59:72:3e:89:1c:51:39:23:
1a:40:12:e3:fa:57:41:48:44:b4:26:a7:b6:0f:f9:
e2:d3:b2:d9:b6:9b:be:96:a7:09:8b:0c:b3:b3:f9:
b1:56:75:5b:50:30:21:51:11:4f:18:e2:6d:06:62:
8e:c9:f4:ff:4a:83:4b:83:45:91:f5:b0:9b:71:2c:
df:7e:b3:c5:15:39:0e:f2:d4:15:e8:af:84:45:e7:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.152.0/21
88.84.128.0/19
89.202.0.0/17
185.1.102.0/24
193.110.116.0/22
217.68.144.0/20
217.79.208.0/20
IPv6:
2001:7f8:bd::/48
2001:4c68::/32
2a01:5000::/32
2a02:20a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24581
24989
34972
59991
197539
Signature Algorithm: sha256WithRSAEncryption
a8:17:f6:82:e0:23:05:9a:42:26:bc:59:d7:8a:ef:e2:e5:38:
98:b5:3d:a3:ad:dd:c5:bb:c3:ac:bb:13:3a:fa:a1:9b:76:8c:
0c:38:74:b6:5a:f5:9d:13:5e:68:01:d3:df:d4:0a:43:05:ef:
6f:c6:d6:29:eb:f9:fe:c7:b4:39:c5:b2:26:aa:69:ab:e5:d7:
92:6b:0f:22:42:5e:d0:8b:f6:f9:c1:f2:87:2a:37:13:6e:2b:
28:b7:a7:f5:32:88:7b:a2:13:90:1c:a8:74:79:9b:7f:d7:02:
81:f4:29:f3:8c:e5:01:cf:c1:47:01:b3:9e:94:48:2c:63:90:
84:72:90:ea:68:90:6c:37:62:5d:7d:7f:61:39:f8:44:33:eb:
f4:76:ea:8b:2e:d5:e3:92:2d:41:ca:38:9a:0a:01:4c:bd:04:
86:6c:db:ea:27:8c:93:63:ca:0c:fb:08:a2:26:3c:7c:cf:96:
7f:91:0a:a8:5e:4c:19:1e:ce:3f:f6:3b:33:55:48:5a:2f:31:
f3:e0:a6:4f:31:71:34:bf:89:54:6c:01:c2:bd:40:93:ab:e5:
13:f1:e8:38:3c:6b:d2:0c:92:3b:fb:34:17:c2:80:76:82:6e:
2e:72:09:70:14:f9:2c:d7:a3:01:cc:c4:d7:a4:88:bf:d7:25:
23:b3:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:28 2024 by rpki-client on console-fra.rpki-client.org