Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
File: 5_7U53ggnDyuk9S3bTUHBEYsOqs.cer (raw, json)
Hash identifier: flQs1XOHVSHZFnJfkndwrhFNMjPW75f33dSpwJ9zw6k=
Subject key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8708C23C1F4E9601D33A9C1F92C785B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39501
AS: 59703
IP: 45.140.28.0/22
IP: 85.204.30.0/23
IP: 85.204.76.0/23
IP: 85.204.104.0/23
IP: 86.104.232.0/21
IP: 89.32.196.0/23
IP: 89.33.18.0/23
IP: 89.33.128.0/23
IP: 89.33.204.0/23
IP: 89.33.234.0/23
IP: 89.33.240.0/23
IP: 89.34.20.0/23
IP: 89.34.88.0/23
IP: 89.34.94.0/23
IP: 89.34.168.0/23
IP: 89.34.176.0/23
IP: 89.34.200.0/23
IP: 89.35.58.0/23
IP: 89.35.132.0/23
IP: 89.35.156.0/23
IP: 89.35.176.0/23
IP: 89.35.194.0/23
IP: 89.36.16.0/23
IP: 89.36.194.0/23
IP: 89.36.226.0/23
IP: 89.36.252.0/23
IP: 89.37.30.0/23
IP: 89.37.42.0/23
IP: 89.37.102.0/23
IP: 89.37.198.0/23
IP: 89.37.218.0/23
IP: 89.38.24.0/23
IP: 89.38.102.0/23
IP: 89.38.242.0/23
IP: 89.39.186.0/23
IP: 89.40.38.0/23
IP: 89.40.78.0/23
IP: 89.40.90.0/23
IP: 89.40.106.0/23
IP: 89.40.110.0/23
IP: 89.40.128.0/23
IP: 89.41.8.0 -- 89.41.23.255
IP: 89.41.32.0/23
IP: 89.41.58.0/23
IP: 89.41.240.0/21
IP: 89.42.32.0/23
IP: 89.42.56.0/23
IP: 89.42.68.0/23
IP: 89.42.150.0/23
IP: 89.42.228.0/23
IP: 89.43.36.0/23
IP: 89.43.70.0/23
IP: 89.43.88.0 -- 89.43.103.255
IP: 89.43.182.0/23
IP: 89.43.188.0/23
IP: 89.43.204.0/23
IP: 89.44.112.0/23
IP: 89.44.118.0/23
IP: 89.44.146.0/23
IP: 89.44.190.0/23
IP: 89.44.202.0/23
IP: 89.45.68.0/23
IP: 89.45.80.0/23
IP: 89.45.126.0/23
IP: 89.45.230.0/23
IP: 89.46.44.0/23
IP: 89.46.60.0/23
IP: 89.46.94.0/23
IP: 89.165.0.0/17
IP: 94.176.32.0/21
IP: 94.177.72.0/21
IP: 185.46.0.0/22
IP: 188.158.0.0 -- 188.159.223.255
IP: 188.214.120.0/23
IP: 2a00:1fe0::/32
IP: 2a0e:d540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:8c:23:c1:f4:e9:60:1d:33:a9:c1:f9:2c:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:21:91:4b:f9:62:a0:57:b3:77:e0:d8:b6:
35:8b:12:d5:25:0b:f7:85:27:e0:b8:d4:b1:31:1b:
7f:b6:95:5f:57:b8:06:fb:f3:13:23:1e:c5:7d:3f:
85:db:b5:4b:a7:37:5b:98:0f:69:2f:1f:6f:db:af:
38:ae:10:d8:ba:1a:60:5b:db:44:32:27:d5:51:cb:
71:96:e5:94:e7:5d:5e:8c:18:a7:54:73:66:a8:b1:
e0:e9:fb:61:01:22:fc:bb:0b:a6:64:1c:37:ef:f1:
89:00:c3:c9:01:93:b8:4a:f8:d9:db:df:3b:fa:58:
e0:2d:41:d4:be:d9:20:c5:2e:cb:f3:08:3b:2c:ca:
d1:ba:57:ef:a3:a1:00:75:cf:2b:9e:3c:33:56:f4:
b7:5e:1b:77:6b:1d:2c:af:02:d8:ac:7a:e6:ae:52:
a9:e1:64:7f:ed:c0:08:33:9f:25:d5:3e:af:d7:1c:
86:46:fb:60:82:e4:ff:7a:4a:77:ba:35:a7:f0:b9:
93:2f:f7:14:2e:1d:8b:2f:ea:e3:cb:20:ff:a7:86:
c7:1d:fd:b0:21:cc:e4:ea:ba:86:06:f1:6d:4f:a0:
f2:06:cf:4f:25:51:ad:b8:88:f1:a0:e0:f9:d6:ab:
c4:a7:ee:20:f1:a0:c8:0a:b4:50:8c:3e:86:4d:5e:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.128.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
188.214.120.0/23
IPv6:
2a00:1fe0::/32
2a0e:d540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39501
59703
Signature Algorithm: sha256WithRSAEncryption
6f:65:dd:2e:75:31:e0:8d:68:ad:e5:84:44:b8:85:42:23:a3:
91:c3:bc:85:83:11:bc:93:36:d3:b8:0e:12:70:d3:20:57:7d:
86:6a:6c:5c:05:3b:26:42:98:19:d8:2c:ca:47:b4:e4:16:40:
d2:80:28:7a:f9:f4:fa:22:16:a5:7b:20:7a:e9:41:c9:57:d2:
90:e4:a0:0e:83:77:69:de:a9:22:90:4d:39:82:8b:5f:34:50:
a8:e5:bc:f9:d9:a4:38:6d:e8:5c:a6:c1:4b:1d:26:f8:ab:6e:
0d:17:ad:22:9f:54:aa:e0:a0:11:7d:04:df:20:6e:aa:21:30:
14:7c:e7:53:01:1b:ee:14:80:84:70:d9:0a:f2:17:47:82:0f:
22:29:9a:53:8b:7b:b2:f9:64:10:40:55:cd:40:e5:35:df:89:
d5:c8:ed:69:87:83:15:23:c2:5b:36:26:1c:c4:8a:ac:d2:a3:
7b:14:f8:36:8e:0c:a3:78:1a:64:ad:de:c5:01:5f:fc:1b:4a:
35:4d:ed:9b:03:32:e2:35:30:99:1d:f6:1e:84:f0:c7:7f:93:
31:cc:38:23:c1:7f:d6:6c:91:80:99:3f:0b:08:db:9c:fe:16:
16:c3:a3:33:7e:14:1f:ee:31:2b:b0:b9:5b:22:3d:6a:97:4a:
f2:b0:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:58:22 2024 by rpki-client on console-fra.rpki-client.org