Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer (raw, json)
Hash identifier: PDOJbR1mC0r86ixSAXdFsZpXEUU82U0Cew3ui61A8zk=
Subject key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7272028690DDDC1724AC31DEDBC8FB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39882
AS: 198849
AS: 201071
IP: 91.109.248.0/21
IP: 92.249.5.0/24
IP: 185.114.228.0/22
IP: 217.147.112.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:20:28:69:0d:dd:c1:72:4a:c3:1d:ed:bc:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acf910f36291c3c224ddb596d956543197f163de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:55:2a:1d:d4:5f:1d:1d:34:38:27:a5:a3:
81:57:31:10:a0:ed:1d:64:cb:a6:c8:95:cc:ce:a5:
9f:b0:ba:17:9a:96:10:20:45:83:db:a0:1b:d4:49:
90:b4:0d:1f:d6:89:c0:ce:93:b4:c7:54:f0:ef:98:
00:0a:ba:f0:97:f4:64:74:d1:6c:fc:7b:b6:50:4a:
16:c6:63:3f:82:24:ce:3d:ce:1d:e2:2b:c4:8a:6a:
48:de:35:c8:e2:36:fc:59:2c:e5:fa:f7:aa:49:a1:
b4:5e:16:14:4a:b6:86:ab:04:15:29:75:9c:59:11:
c5:28:ee:17:e1:56:f9:52:3c:f4:df:a3:56:4b:48:
a2:36:83:31:04:33:f5:15:58:86:09:e1:5b:4d:04:
30:b2:cb:de:f2:db:c6:f2:42:de:ec:4c:ae:ad:53:
2d:ac:4f:10:58:7c:fd:44:16:e6:40:41:de:45:2c:
27:ab:27:4f:a4:86:a5:54:c5:11:ae:04:9f:ba:08:
3b:f7:e0:56:24:72:86:b6:9c:3d:69:2f:db:2f:c9:
e5:11:ab:a7:68:5b:84:77:28:00:f5:a2:d2:98:7c:
c0:af:da:50:4d:0a:dd:4e:57:d1:69:3b:02:91:09:
2b:23:5b:18:52:e7:e0:ac:c6:03:38:9f:8a:e1:1a:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0/21
92.249.5.0/24
185.114.228.0/22
217.147.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39882
198849
201071
Signature Algorithm: sha256WithRSAEncryption
46:61:c3:df:fb:92:a8:33:79:ca:32:f9:b7:2d:39:a2:c5:34:
ce:fc:1b:56:1f:8c:52:23:67:bb:a4:94:bb:76:07:61:ab:28:
3e:b2:e8:ab:6c:89:d2:95:23:e8:3c:e7:03:e3:09:87:25:a1:
1c:9d:88:cf:01:46:71:ee:17:a7:37:39:f3:25:fc:c1:64:ce:
c7:86:fa:ba:b0:38:18:2a:4e:b9:34:6a:8a:1b:1a:bf:a5:e5:
4d:72:d2:38:7d:ab:7f:01:98:2d:22:0f:0a:6d:3a:6a:df:2c:
e7:9a:32:65:2c:db:22:c7:3f:62:78:06:6e:73:e0:91:ec:d7:
00:2a:e3:ae:b7:14:f9:3a:c6:ce:9f:c2:de:20:35:d4:43:95:
99:05:72:7f:8f:4d:47:b6:45:02:fc:3a:60:e7:63:1d:ad:f5:
58:9d:04:60:4b:3c:2d:40:0d:3f:ec:7a:06:9f:81:b0:6a:bb:
42:a8:c6:5f:78:2d:1f:55:54:5d:8e:bb:d5:b2:2e:ff:21:3d:
0f:33:92:9d:37:49:19:62:06:26:7c:97:b7:51:4e:4e:cf:e9:
72:c9:95:b2:43:0c:ce:5b:92:ae:67:cb:99:37:36:12:c9:cd:
72:a8:9c:0f:33:99:f8:83:74:a8:af:73:ee:e6:0c:53:35:fe:
71:4d:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:26 2024 by rpki-client on console-ams.rpki-client.org