Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
File: 5_7U53ggnDyuk9S3bTUHBEYsOqs.cer (raw, json)
Hash identifier: pNKSGUJj+aJQ+IaTXRjlgOUx+VakYoqSDxvLLeRGZio=
Subject key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191EA77FE81577F4E50CAA59A617C8E29E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Sep 2024 08:20:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39501
AS: 59703
IP: 45.140.28.0/22
IP: 85.204.30.0/23
IP: 85.204.76.0/23
IP: 85.204.104.0/23
IP: 86.104.232.0/21
IP: 89.32.196.0/23
IP: 89.33.18.0/23
IP: 89.33.129.0/24
IP: 89.33.204.0/23
IP: 89.33.234.0/23
IP: 89.33.240.0/23
IP: 89.34.20.0/23
IP: 89.34.88.0/23
IP: 89.34.94.0/23
IP: 89.34.168.0/23
IP: 89.34.176.0/23
IP: 89.34.200.0/23
IP: 89.35.58.0/23
IP: 89.35.132.0/23
IP: 89.35.156.0/23
IP: 89.35.176.0/23
IP: 89.35.194.0/23
IP: 89.36.16.0/23
IP: 89.36.194.0/23
IP: 89.36.226.0/23
IP: 89.36.252.0/23
IP: 89.37.30.0/23
IP: 89.37.42.0/23
IP: 89.37.102.0/23
IP: 89.37.198.0/23
IP: 89.37.218.0/23
IP: 89.38.24.0/23
IP: 89.38.102.0/23
IP: 89.38.242.0/23
IP: 89.39.186.0/23
IP: 89.40.38.0/23
IP: 89.40.78.0/23
IP: 89.40.90.0/23
IP: 89.40.106.0/23
IP: 89.40.110.0/23
IP: 89.40.128.0/23
IP: 89.41.8.0 -- 89.41.23.255
IP: 89.41.32.0/23
IP: 89.41.58.0/23
IP: 89.41.240.0/21
IP: 89.42.32.0/23
IP: 89.42.56.0/23
IP: 89.42.68.0/23
IP: 89.42.150.0/23
IP: 89.42.228.0/23
IP: 89.43.36.0/23
IP: 89.43.70.0/23
IP: 89.43.88.0 -- 89.43.103.255
IP: 89.43.182.0/23
IP: 89.43.188.0/23
IP: 89.43.204.0/23
IP: 89.44.112.0/23
IP: 89.44.118.0/23
IP: 89.44.146.0/23
IP: 89.44.190.0/23
IP: 89.44.202.0/23
IP: 89.45.68.0/23
IP: 89.45.80.0/23
IP: 89.45.126.0/23
IP: 89.45.230.0/23
IP: 89.46.44.0/23
IP: 89.46.60.0/23
IP: 89.46.94.0/23
IP: 89.165.0.0/17
IP: 94.176.32.0/21
IP: 94.177.72.0/21
IP: 185.46.0.0/22
IP: 188.158.0.0 -- 188.159.223.255
IP: 188.214.120.0/23
IP: 2a00:1fe0::/32
IP: 2a0e:d540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:77:fe:81:57:7f:4e:50:ca:a5:9a:61:7c:8e:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 13 08:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:21:91:4b:f9:62:a0:57:b3:77:e0:d8:b6:
35:8b:12:d5:25:0b:f7:85:27:e0:b8:d4:b1:31:1b:
7f:b6:95:5f:57:b8:06:fb:f3:13:23:1e:c5:7d:3f:
85:db:b5:4b:a7:37:5b:98:0f:69:2f:1f:6f:db:af:
38:ae:10:d8:ba:1a:60:5b:db:44:32:27:d5:51:cb:
71:96:e5:94:e7:5d:5e:8c:18:a7:54:73:66:a8:b1:
e0:e9:fb:61:01:22:fc:bb:0b:a6:64:1c:37:ef:f1:
89:00:c3:c9:01:93:b8:4a:f8:d9:db:df:3b:fa:58:
e0:2d:41:d4:be:d9:20:c5:2e:cb:f3:08:3b:2c:ca:
d1:ba:57:ef:a3:a1:00:75:cf:2b:9e:3c:33:56:f4:
b7:5e:1b:77:6b:1d:2c:af:02:d8:ac:7a:e6:ae:52:
a9:e1:64:7f:ed:c0:08:33:9f:25:d5:3e:af:d7:1c:
86:46:fb:60:82:e4:ff:7a:4a:77:ba:35:a7:f0:b9:
93:2f:f7:14:2e:1d:8b:2f:ea:e3:cb:20:ff:a7:86:
c7:1d:fd:b0:21:cc:e4:ea:ba:86:06:f1:6d:4f:a0:
f2:06:cf:4f:25:51:ad:b8:88:f1:a0:e0:f9:d6:ab:
c4:a7:ee:20:f1:a0:c8:0a:b4:50:8c:3e:86:4d:5e:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.129.0/24
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
188.214.120.0/23
IPv6:
2a00:1fe0::/32
2a0e:d540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39501
59703
Signature Algorithm: sha256WithRSAEncryption
5a:d5:7e:86:33:97:89:a8:09:33:57:e1:9e:a4:af:bd:5a:ee:
a5:b8:dd:09:df:2b:f8:a3:0c:46:73:c6:66:cb:c0:5b:70:0b:
36:ff:22:6d:09:56:18:85:be:b7:a2:5c:90:01:01:91:81:70:
e7:5e:7f:12:2e:45:ab:f4:45:00:b5:83:cd:42:f3:58:30:6e:
27:b0:b4:85:12:fa:15:34:a1:7a:89:e1:32:2c:f4:c2:e7:dd:
6b:ba:7a:75:50:57:a7:5f:0b:52:2a:45:1b:40:0c:0a:16:24:
01:99:6e:6e:ea:d0:aa:3f:a8:c1:b9:1e:e0:9c:34:51:76:c5:
dc:48:dd:a5:fd:51:12:3c:b0:49:49:c5:fc:34:fc:fd:f2:26:
65:26:b4:bf:3b:50:77:0b:d5:be:78:00:db:2c:a1:a2:5d:af:
72:93:81:74:35:39:8d:c2:95:74:14:50:71:2c:4a:f3:cd:87:
bb:b0:8a:31:50:4e:a8:20:fe:ce:b4:e4:b3:8b:86:4b:ee:fc:
24:5a:13:48:56:0d:18:6f:cf:c4:a3:56:a7:3c:34:7f:fe:36:
a4:7b:c3:e2:57:c5:b3:b6:5f:70:e6:98:e7:69:72:da:3a:b4:
7a:d2:7f:5e:2c:aa:7a:b8:b3:ef:67:a6:c3:83:0d:db:fe:e2:
fd:f9:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:42 2024 by rpki-client on console-fra.rpki-client.org