Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
File: rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer (raw, json)
Hash identifier: nYtE2lH1/P5UOSEs62uBgWNon5LcMIUke7m/a95j9Gg=
Subject key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0A0A9057C49EAECD8CCB08448BE482FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 15:17:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13103
AS: 20850
AS: 25229
AS: 43010
AS: 43266
IP: 37.46.216.0/21
IP: 45.15.232.0/22
IP: 77.120.0.0 -- 77.120.55.255
IP: 77.120.60.0 -- 77.121.13.255
IP: 77.121.15.0 -- 77.121.31.255
IP: 77.121.64.0 -- 77.123.191.255
IP: 77.244.32.0/20
IP: 82.144.192.0/19
IP: 95.69.128.0/17
IP: 109.201.224.0/19
IP: 141.170.224.0/19
IP: 188.230.0.0/17
IP: 193.189.96.0/23
IP: 2a00:ac80::/32
IP: 2a02:7e8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:0a:90:57:c4:9e:ae:cd:8c:cb:08:44:8b:e4:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 15:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:5e:70:10:19:83:e5:26:1a:37:c4:fd:8b:
75:03:fe:fa:59:fc:c4:9f:94:99:6c:6c:8d:59:fd:
51:71:56:0b:68:72:cd:11:07:c9:53:5f:c9:37:0a:
0a:2b:f1:a2:64:2b:c0:1b:71:8a:91:02:c8:40:e6:
39:bd:a7:7d:95:3e:0e:bc:82:16:07:0d:35:26:55:
6a:fc:ed:2d:15:26:20:33:69:74:83:c6:c3:be:46:
31:36:4a:2f:b3:f0:0c:93:6e:25:d9:8f:f4:92:8d:
78:d6:4b:8f:e5:5a:fd:3e:29:9b:a2:ee:05:a9:1a:
b7:e3:48:8f:78:04:8e:49:27:6f:13:e7:33:e7:9a:
2b:a9:09:fc:6e:dd:68:ff:b4:73:9c:c6:97:08:b6:
ce:e7:60:65:ae:67:c5:45:b0:d6:14:72:6b:cf:a0:
b5:b7:38:9e:2c:af:b8:62:f2:43:64:44:ff:c4:3f:
4b:0a:cd:b3:e3:07:41:b5:2c:97:8d:28:7d:0b:b3:
40:b0:20:3c:38:64:90:58:44:15:c6:0c:18:fc:34:
29:25:09:4c:d6:28:45:5f:90:74:aa:b2:81:b7:e2:
d1:29:09:c2:22:ef:ba:80:89:80:b5:9f:1f:65:f8:
fa:a2:6a:1d:53:d6:5f:e4:af:ec:5b:18:63:b4:76:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.216.0/21
45.15.232.0/22
77.120.0.0-77.120.55.255
77.120.60.0-77.121.13.255
77.121.15.0-77.121.31.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
95.69.128.0/17
109.201.224.0/19
141.170.224.0/19
188.230.0.0/17
193.189.96.0/23
IPv6:
2a00:ac80::/32
2a02:7e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13103
20850
25229
43010
43266
Signature Algorithm: sha256WithRSAEncryption
44:17:34:24:4f:9b:3d:bb:62:5a:5f:21:78:e8:7c:a3:41:9a:
89:11:8d:26:d3:a7:4b:35:41:b8:77:af:e2:4f:f5:5a:05:2d:
16:6b:de:3d:da:8c:07:c2:12:bd:3b:d1:5f:1c:03:f5:5d:b9:
25:3f:d4:7f:a4:69:1e:22:5f:4b:5c:ce:b9:b7:d9:10:35:94:
fa:ff:f4:16:ea:64:17:5d:c3:b0:25:00:13:3f:e1:7e:8d:d4:
25:3d:84:fa:c3:79:9c:ce:15:86:4e:04:43:01:06:3e:ae:7e:
c8:16:4d:ea:4b:96:ac:34:83:51:59:6d:d7:c9:a0:87:34:2c:
c1:3e:99:a7:74:e3:a1:9f:fe:ae:5a:d2:eb:f7:3d:b0:bf:d7:
23:5a:07:eb:71:3d:92:1f:ab:af:25:0a:16:8e:97:13:18:c4:
df:91:74:32:8c:10:40:2f:7d:41:e2:32:27:e8:3b:b6:80:00:
3a:2b:5c:ce:4f:55:37:c7:7d:16:40:56:a7:de:46:92:09:f2:
f4:c6:81:83:48:7f:b2:08:75:3d:7d:6a:84:1d:3e:e7:22:5b:
0e:79:ff:8b:23:45:fe:26:01:b8:ee:bc:24:56:07:87:62:f5:
c7:7c:40:e8:56:e2:41:3d:8e:11:55:3e:f6:a1:7c:cb:c2:6e:
bc:e1:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:05 2024 by rpki-client on console-ams.rpki-client.org