Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
File: eNo_c5yggv_oh_cDBuf8dIRgbOI.cer (raw, json)
Hash identifier: LQ53otu6pr9Ed7Ui5QXpUmXbAFZSQuYZTCgipA+Zaqo=
Subject key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01922D46503204845EE18CB7A1788EE9DF23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Sep 2024 07:40:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15879
IP: 5.226.40.0/21
IP: 46.255.104.0/21
IP: 77.245.80.0/20
IP: 80.246.176.0/20
IP: 81.24.48.0/20
IP: 82.201.0.0/17
IP: 83.219.64.0/19
IP: 87.250.128.0/19
IP: 93.188.248.0/21
IP: 94.247.192.0/21
IP: 185.28.148.0/22
IP: 185.55.128.0/22
IP: 193.91.48.0/20
IP: 193.189.134.0/24
IP: 194.105.138.0/23
IP: 212.204.192.0/18
IP: 213.130.160.0/19
IP: 213.133.32.0/19
IP: 213.197.192.0/18
IP: 213.206.64.0/18
IP: 217.115.192.0/20
IP: 217.148.80.0/20
IP: 217.149.64.0/20
IP: 217.194.96.0/19
IP: 2001:67c:1a4::/48
IP: 2001:898::/29
IP: 2001:9a0::/32
IP: 2001:14a0::/32
IP: 2001:40e0::/32
IP: 2a02:f18::/32
IP: 2a02:f30::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:46:50:32:04:84:5e:e1:8c:b7:a1:78:8e:e9:df:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 07:40:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:60:3a:3a:8e:da:0d:0b:5a:04:ea:be:67:
af:22:ba:76:8e:87:7f:7a:f6:70:6f:58:c2:80:43:
2f:ce:a9:18:ea:38:34:f6:53:40:a3:7d:54:24:7d:
9e:54:64:5e:b5:70:a9:f0:11:82:dc:c7:08:00:2d:
4c:fb:19:b3:0e:1f:36:7c:47:73:cc:7b:4a:0e:86:
d7:bd:d9:1f:d6:84:36:8a:d0:ef:33:70:31:ab:ba:
9a:63:0e:f3:08:c9:57:c3:1f:85:8d:44:cb:fa:0e:
8b:e5:01:63:00:6b:01:dc:d5:b1:d1:4c:3b:0c:07:
43:e7:53:dd:9e:56:89:27:01:ce:fb:aa:85:3d:7d:
eb:c3:54:e0:9f:9b:39:0a:48:ba:26:6f:0f:8c:06:
f1:71:35:c4:d1:d6:fd:8a:d2:7a:d5:f9:b5:11:d6:
60:33:3a:1b:e8:9e:47:23:b8:4e:e7:d8:32:41:5e:
57:94:04:40:58:a6:b5:03:13:16:97:52:ac:38:1d:
81:8f:41:3e:72:f3:d7:0c:68:20:9b:05:c4:ef:6a:
70:b9:5c:42:78:0b:71:a7:b4:67:97:0f:1b:c0:aa:
a9:5d:27:89:c1:04:e2:75:62:ca:2b:c0:84:f1:b5:
47:d2:64:08:46:d6:4f:72:19:ca:6c:fc:2d:9c:ed:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.40.0/21
46.255.104.0/21
77.245.80.0/20
80.246.176.0/20
81.24.48.0/20
82.201.0.0/17
83.219.64.0/19
87.250.128.0/19
93.188.248.0/21
94.247.192.0/21
185.28.148.0/22
185.55.128.0/22
193.91.48.0/20
193.189.134.0/24
194.105.138.0/23
212.204.192.0/18
213.130.160.0/19
213.133.32.0/19
213.197.192.0/18
213.206.64.0/18
217.115.192.0/20
217.148.80.0/20
217.149.64.0/20
217.194.96.0/19
IPv6:
2001:67c:1a4::/48
2001:898::/29
2001:9a0::/32
2001:14a0::/32
2001:40e0::/32
2a02:f18::/32
2a02:f30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15879
Signature Algorithm: sha256WithRSAEncryption
5c:11:0d:22:81:e2:f1:c1:4f:a9:1e:56:33:27:47:ae:e4:ab:
b4:b2:2e:6a:58:a0:1b:11:c3:d9:0b:38:bc:68:fb:65:ea:d3:
ab:2e:5f:e4:dc:2d:36:35:06:e5:ba:d6:c0:71:19:ed:9e:bf:
e9:3d:0c:e2:40:52:fe:16:3c:2b:af:dc:d1:4f:7f:38:69:20:
6b:54:d3:a1:7f:a8:0f:c9:a3:ef:d8:dc:26:d4:73:d0:a3:a0:
90:a2:0e:aa:5b:98:0d:ee:c4:a7:45:56:50:60:28:bf:cb:1a:
99:a2:b7:40:bd:66:32:09:e5:67:99:86:16:cd:90:d4:b4:d2:
b4:b1:d5:0d:e5:42:25:f1:ed:98:62:bf:1c:7d:91:3b:68:d3:
f6:9f:fa:b1:ca:62:5d:fc:2c:0f:47:70:9a:b8:69:18:dc:a0:
3e:fa:37:4c:a5:21:d9:77:5d:0a:15:ed:97:a0:7c:c9:94:e3:
00:ff:7c:de:cb:5e:91:0b:b1:96:e1:9e:e1:46:5d:67:d8:68:
fe:45:21:95:b4:e5:cb:8f:53:ea:be:e6:18:24:14:60:f7:23:
84:44:f8:f6:b4:d0:d4:20:cc:a6:7e:af:f3:68:18:b9:47:1c:
b1:c0:21:8d:85:71:bb:64:73:07:3c:cc:f1:44:c2:aa:6b:e3:
6f:ac:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:04:56 2024 by rpki-client on console-ams.rpki-client.org