Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.cer (raw, json)
Hash identifier: BXoVP4nSn0nG954v/vrGYgHttgLP/nupyUrUBa0okGs=
Subject key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192952A24E5E8595D48218B233BE5262B96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Oct 2024 11:50:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62068
IP: 5.182.208.0/22
IP: 45.14.224.0/22
IP: 45.87.40.0/22
IP: 62.68.71.0/24
IP: 91.226.227.0/24
IP: 91.230.49.0/24
IP: 146.19.248.0/24
IP: 185.224.128.0/22
IP: 185.244.36.0/22
IP: 2a0d:2400::/29
IP: 2a0d:2780::/29
IP: 2a0e:16c0::/29
IP: 2a0e:1740::/29
IP: 2a0e:2000::/29
IP: 2a11:b240::/29
IP: 2a12:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:2a:24:e5:e8:59:5d:48:21:8b:23:3b:e5:26:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 11:50:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:4b:0b:ac:dd:1b:97:aa:95:c8:4f:e9:49:
72:e7:92:ce:ba:d5:5a:f3:2b:28:3e:d4:68:d8:7a:
b7:42:97:f2:d4:7c:ba:a9:78:dd:5e:30:d2:13:81:
4c:6a:e8:3e:70:6b:7d:8a:52:24:30:f8:f1:22:0c:
ab:a1:bc:50:61:be:4a:2d:a2:8b:1e:65:cf:07:57:
6f:7b:c1:c8:31:2a:0d:fa:27:5f:dc:9f:33:97:aa:
59:e9:d3:4f:59:95:6d:35:a4:68:74:1d:e8:76:85:
6c:ee:40:e0:1e:42:f3:0b:75:80:68:f7:0a:ca:fb:
e1:96:88:99:cd:cf:50:d6:a0:96:30:82:53:06:14:
b8:3c:97:f3:10:4b:ad:4c:81:d8:e8:86:e2:62:57:
5e:ff:e7:fc:b7:c2:d4:06:23:67:58:a2:10:7e:ae:
5d:ba:49:79:91:01:a0:a0:1d:1c:f0:67:ad:3c:31:
ba:33:e6:de:50:d7:44:31:18:ba:fc:87:54:16:94:
a2:45:63:30:5c:51:ef:e0:2f:6a:88:60:50:5f:b8:
89:0c:44:21:13:d9:f7:6e:6e:cf:ed:00:27:a2:8d:
66:23:41:4a:f7:a1:4a:df:92:01:a4:e7:22:cb:e2:
8f:5b:ad:d1:34:91:88:55:3a:94:37:cb:4b:c3:06:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.40.0/22
62.68.71.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62068
Signature Algorithm: sha256WithRSAEncryption
1a:22:63:b4:4c:ab:83:c3:f9:0c:49:03:a8:83:39:62:8d:fa:
dd:6e:17:df:83:00:7a:20:fa:c4:c3:41:d4:d1:ef:b4:21:c9:
26:7e:98:62:d4:7b:1e:cf:26:f5:0f:58:b7:72:a4:ff:83:81:
5a:52:54:36:b4:0c:da:7a:49:73:c6:49:a7:f6:6b:73:d0:f2:
bb:fb:3d:dc:be:fb:6c:14:9a:9e:9c:42:a7:c1:58:c3:1c:c9:
2f:4c:a5:1c:ad:30:19:f2:60:e4:f3:21:6f:eb:27:84:23:ea:
88:3e:2f:2e:9c:dd:f2:35:f3:32:02:27:ba:3e:7c:02:fe:9b:
d6:1a:3a:62:5c:f7:97:ba:30:e4:4e:7e:26:f9:11:14:8e:dd:
f4:44:80:04:d2:73:b8:87:bb:1d:aa:a5:52:cd:2e:97:9e:2c:
3d:b9:a7:d6:0e:ff:47:87:6c:7c:d4:43:97:da:6d:53:fb:99:
0e:9a:a7:75:c2:0f:fc:d9:c1:19:bb:f5:eb:62:47:13:79:11:
19:fb:56:d7:bb:ed:24:75:39:9e:d0:12:fa:9e:5d:3f:0c:82:
17:ac:5f:2e:90:6a:56:85:3e:b4:13:69:3b:a2:da:93:a5:42:
ac:85:5f:ab:ac:fb:fa:da:57:8f:c2:61:84:b4:ed:d5:8b:13:
81:fd:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:33 2024 by rpki-client on console-fra.rpki-client.org