Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
File: yE1hzRftkuVLszl_HlprOQSsbwU.cer (raw, json)
Hash identifier: ALqkfe4eKtD11PVMSoLTuiDMIZM6ORE2pnoU8C6NLII=
Subject key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424D39807304FA94230C93BB1160DE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16376
AS: 39537
AS: 48973
AS: 51491
AS: 201657
AS: 203425
IP: 31.210.128.0/21
IP: 37.35.88.0/21
IP: 45.145.180.0/22
IP: 87.237.64.0/21
IP: 93.95.8.0/21
IP: 94.190.240.0/21
IP: 94.199.184.0/21
IP: 109.69.80.0/21
IP: 151.236.208.0/21
IP: 185.11.240.0/22
IP: 185.31.252.0/22
IP: 185.33.184.0/22
IP: 185.49.236.0/22
IP: 185.68.0.0/22
IP: 185.71.24.0/22
IP: 185.122.216.0/22
IP: 195.94.112.0/20
IP: 195.189.124.0/22
IP: 2a00:e620::/32
IP: 2a01:500::/29
IP: 2a01:b280::/29
IP: 2a03:25e0::/32
IP: 2a04:5ac0::/29
IP: 2a0a:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d3:98:07:30:4f:a9:42:30:c9:3b:b1:16:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:48:36:04:69:f8:5e:81:4d:94:c1:f4:ff:
9e:f3:a7:81:66:c1:ea:03:4a:f1:a8:a3:48:7a:c7:
25:b9:0f:61:d0:81:0f:40:0d:00:54:dc:4a:fa:62:
f3:7e:28:d9:de:36:7d:3a:53:e4:06:9d:b5:0c:c6:
91:c6:fe:dc:df:2f:d9:03:52:d3:7e:07:9b:ac:6e:
5c:34:b0:df:07:d6:b7:0b:39:8c:e2:38:49:fa:0c:
d4:de:6f:eb:81:14:e8:0c:42:b4:e9:77:ad:30:0e:
06:9b:41:e2:8a:51:5c:27:d2:f5:98:0f:f1:de:85:
db:92:2f:00:b0:5b:96:b5:51:d5:d9:73:f0:03:e8:
5e:ad:e8:3e:1e:b8:76:61:e0:3a:36:7a:dd:cd:61:
3f:26:ef:94:0a:2c:02:88:b0:9a:57:03:f1:7a:b6:
c6:28:ef:e9:f9:0c:7a:e4:94:05:ac:aa:ba:25:65:
f6:2c:fa:8c:3f:f4:4a:bb:c7:ad:02:e8:44:a3:a2:
d5:f3:11:fa:2a:57:b1:b6:94:08:f0:c6:c5:be:c9:
d7:d9:22:6a:6d:8a:bc:34:d2:91:ba:34:a3:44:f7:
6b:e5:47:7a:3b:b8:90:e3:14:29:68:d3:7b:9b:4a:
7b:6d:64:0d:88:6f:a3:7d:64:bc:8d:e5:67:be:f8:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
195.189.124.0/22
IPv6:
2a00:e620::/32
2a01:500::/29
2a01:b280::/29
2a03:25e0::/32
2a04:5ac0::/29
2a0a:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16376
39537
48973
51491
201657
203425
Signature Algorithm: sha256WithRSAEncryption
49:d9:01:40:0a:dc:8f:a2:f5:bb:89:c8:46:7f:a8:e3:3e:ee:
e7:b1:a3:9a:e3:bc:89:75:96:d0:66:2c:65:7d:7c:64:88:e1:
2a:59:b1:ca:55:2d:a9:57:79:d0:a6:85:40:9d:ac:84:65:c3:
ff:3c:86:32:b2:df:aa:a7:e1:0e:01:5b:b1:48:c9:51:a7:11:
df:d6:aa:aa:38:40:ef:cd:31:65:81:9d:66:89:6b:57:48:2e:
97:7d:00:1c:13:8f:28:0b:53:d6:12:4e:94:2b:1c:35:14:2f:
20:a3:91:bc:15:9a:7d:d5:78:66:45:ff:d2:6e:a9:a2:eb:0b:
d9:69:9d:e1:50:74:c1:f3:51:0b:b4:06:a0:cd:26:b8:ea:c2:
54:9c:f2:78:a5:98:8f:f2:31:d9:a7:18:fd:f1:9f:89:18:7a:
c4:06:a7:d1:33:51:78:f1:df:a2:e4:c5:77:d7:7d:61:5d:dc:
b2:0a:9f:fb:7a:c1:b1:d1:98:d4:92:1b:6d:0d:ce:77:12:32:
01:c5:2d:64:82:88:b2:9b:a7:8c:ab:84:95:83:bb:07:c0:4d:
53:46:f5:a2:46:66:f3:eb:a0:3e:d8:89:68:37:a0:a2:09:09:
f0:26:b5:75:91:c7:92:c5:78:18:bc:e5:b1:d1:11:32:a5:62:
48:7a:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:32 2024 by rpki-client on console-fra.rpki-client.org