Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
File: vMBbyedz38ikm7QwgluXRt1BxPE.cer (raw, json)
Hash identifier: nkzh9cjqwIlBl7LqUGGzRfJUUGaA+RzyjVIdo7RYnOc=
Subject key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8713FF2686E9A88A9A051AAABEF774B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31264
AS: 197519
AS: 198931
IP: 85.208.88.0/22
IP: 95.128.104.0/21
IP: 109.68.176.0/21
IP: 176.221.88.0/21
IP: 185.7.136.0/22
IP: 185.11.0.0/22
IP: 185.51.232.0/22
IP: 185.80.60.0/22
IP: 185.120.100.0/22
IP: 185.220.208.0/22
IP: 217.173.240.0/20
IP: 2001:67c:2a08::/48
IP: 2a00:1f18::/29
IP: 2a02:2838::/32
IP: 2a03:43c0::/32
IP: 2a05:7b00::/29
IP: 2a06:9900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3f:f2:68:6e:9a:88:a9:a0:51:aa:ab:ef:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:1d:2c:41:bc:07:a4:b5:b3:51:67:bd:a7:
bb:71:ab:78:07:cc:16:23:0e:e0:35:fc:35:65:fb:
e1:59:1b:5a:80:00:9b:eb:9c:1c:c0:9b:3b:ab:46:
f5:46:8e:1c:6a:6a:d8:53:03:00:de:fa:95:53:43:
72:62:62:1d:16:76:e0:63:fe:3d:39:2b:91:2a:21:
42:04:e2:ca:a5:ea:e4:70:80:a4:cd:81:ef:d0:a1:
bb:7e:fd:88:bd:8b:44:03:1e:d0:82:f6:71:f0:67:
1c:00:ef:a7:57:bc:20:eb:dd:16:e2:f6:40:ec:b7:
a6:af:ac:53:29:8b:7c:5d:4a:4c:07:3f:3f:d2:02:
87:5b:6b:a2:95:b3:dd:89:a2:f0:2b:8f:77:6a:37:
f9:30:ac:c1:12:6f:07:f3:ff:96:1b:98:91:0d:8f:
7e:9b:58:c7:dc:d5:2a:1a:0d:19:d5:cf:bc:4e:73:
dd:f8:46:06:fc:5e:7e:56:6b:37:9c:de:79:bb:a0:
08:74:e0:b8:2f:3c:dc:4f:06:75:24:f1:33:71:0d:
e6:05:e4:cb:06:b3:9e:d7:36:74:8b:05:31:fb:ef:
b9:f2:06:4e:65:72:c6:de:06:02:29:6a:a9:d5:3d:
56:38:95:93:6a:5e:2f:2d:b7:d4:28:10:25:11:0d:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.88.0/22
95.128.104.0/21
109.68.176.0/21
176.221.88.0/21
185.7.136.0/22
185.11.0.0/22
185.51.232.0/22
185.80.60.0/22
185.120.100.0/22
185.220.208.0/22
217.173.240.0/20
IPv6:
2001:67c:2a08::/48
2a00:1f18::/29
2a02:2838::/32
2a03:43c0::/32
2a05:7b00::/29
2a06:9900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31264
197519
198931
Signature Algorithm: sha256WithRSAEncryption
5e:5b:48:ab:1f:a6:39:f3:bd:ff:f6:9d:3b:ef:fb:73:93:f8:
6c:19:7c:0b:6d:80:a9:d4:5c:7f:2e:da:52:e9:94:3a:dd:52:
02:2f:dd:18:63:fc:8f:e6:5d:39:d6:8f:9f:13:64:0f:e1:01:
b9:99:f5:42:04:e8:60:9c:27:f3:e9:53:df:94:c9:07:7b:05:
9f:88:f0:44:7b:09:76:2c:74:c3:21:40:3a:d3:20:dd:c4:93:
f4:f4:a8:90:cc:14:39:fa:9a:99:27:ec:a0:93:7f:46:e3:ef:
50:2c:2d:85:44:85:8e:4b:7c:1e:1a:a6:1e:e9:0a:59:5f:d6:
36:08:6a:72:13:9a:23:88:55:bf:94:d0:8b:3d:b2:b3:0e:2f:
d1:d6:fb:20:86:ea:37:0a:e2:ea:56:81:c8:00:a8:c4:b3:99:
57:28:7f:19:ca:85:33:01:56:f4:ce:89:18:fa:01:98:12:00:
3d:b5:59:a9:8d:c6:06:25:4d:e1:5a:2b:b8:ae:af:16:a3:f6:
23:c2:64:98:84:d2:95:07:70:eb:a8:db:d3:08:70:4d:8e:1b:
41:9b:e2:57:ba:c4:f2:1b:09:6d:8f:0d:9a:eb:cf:be:2d:05:
53:a1:16:98:9e:b1:fb:72:31:78:01:d4:da:e0:10:1b:4c:79:
90:57:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:35 2024 by rpki-client on console-ams.rpki-client.org