Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
File: E5Mngu53WJkEBPocz7CewjqGEj8.cer (raw, json)
Hash identifier: p4qrciUe7sz/0AxAjiMzaSaaVFq8D0Ofe+iVtK52buc=
Subject key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192E7440C5B5D01B4003EE2B4326289B3CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Nov 2024 10:27:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3344
AS: 9153
IP: 46.248.96.0/19
IP: 82.136.0.0/18
IP: 85.116.0.0/19
IP: 194.1.148.0/24
IP: 195.22.128.0/23
IP: 195.22.134.0/23
IP: 195.68.206.0/23
IP: 195.68.220.0/23
IP: 2001:4088::/32
IP: 2001:4bd0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:44:0c:5b:5d:01:b4:00:3e:e2:b4:32:62:89:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 10:27:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:dd:48:2c:ed:a3:b5:d7:2f:5e:bc:df:9a:
1d:c4:f9:67:94:59:1f:fb:de:dd:dd:be:cb:ab:ad:
6d:58:c1:06:d7:75:ea:1b:e5:37:ed:e7:72:f9:28:
cb:75:7e:fa:8f:72:8d:6c:37:62:ed:88:5d:ac:52:
07:47:10:26:51:e7:20:50:0f:be:7f:7e:63:a0:ea:
6a:6b:e1:37:e9:a4:6e:a6:51:d8:7a:c4:6b:90:d5:
6c:dd:47:10:45:a7:59:33:14:8b:86:c2:d4:e1:82:
5e:08:8f:ac:12:4a:e3:45:30:f4:d0:fc:54:d5:bf:
47:60:5c:82:d5:72:30:00:09:ee:6c:f1:c7:76:2f:
69:9b:24:96:29:00:15:6f:c2:5b:25:8e:31:64:ba:
c5:84:39:59:de:1e:50:15:93:71:a9:0e:43:5c:ff:
7b:bc:f7:e7:84:be:08:05:c7:61:75:25:c7:69:2b:
32:39:12:6b:b9:dc:bb:1f:53:3f:ff:c3:0b:8b:3c:
b8:0d:04:53:89:c6:6a:19:8b:62:06:37:68:16:b4:
fe:1d:6e:ea:41:e1:b3:d1:86:ad:f7:c7:ff:97:f2:
cd:d5:4d:5c:8c:1a:a9:b3:da:0b:bd:d3:20:8e:ef:
a9:d4:4c:61:86:e5:9a:36:b3:28:00:45:0c:55:6c:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.0.0/19
194.1.148.0/24
195.22.128.0/23
195.22.134.0/23
195.68.206.0/23
195.68.220.0/23
IPv6:
2001:4088::/32
2001:4bd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3344
9153
Signature Algorithm: sha256WithRSAEncryption
00:2f:92:61:c1:ad:47:cb:e7:41:cf:51:fe:1d:16:0f:6f:81:
c9:f6:1b:f7:75:5c:10:90:b0:bd:71:05:b8:4b:28:2b:c1:5d:
1f:9d:8d:9e:76:81:bc:9a:2e:a9:bf:98:7f:20:30:9a:67:7e:
d4:c9:a0:fe:f0:ee:7b:cd:5a:37:58:aa:cc:1b:e6:df:24:b1:
13:40:c5:b1:81:a9:8f:17:c6:d4:29:b9:37:1a:ff:57:a7:9c:
87:a4:15:38:10:7a:10:16:76:2d:78:06:2a:f3:61:9e:39:aa:
1c:9c:b3:52:8b:9d:b5:7f:e4:da:69:d4:4f:9a:17:c7:f4:f0:
d3:01:ad:42:3b:a1:8a:5a:ed:63:fa:76:8b:45:96:27:54:70:
6e:1b:3e:31:6c:01:e6:e3:6f:01:31:0e:19:0c:9f:90:0d:e3:
b2:5f:d9:be:17:e2:59:3f:1a:a8:4a:26:f2:8d:1b:b0:c1:f5:
43:f9:d3:cb:b2:e5:16:a9:9f:17:a2:46:d8:2e:ab:d6:94:f7:
1a:22:7a:e0:a1:d9:55:2b:4b:7f:21:6f:f3:87:14:d6:82:c3:
59:70:b9:68:e2:40:b9:1b:de:d6:d7:4e:a6:34:52:69:b5:1a:
9f:55:09:e7:0e:0d:bd:16:bb:db:b7:c5:ce:7d:5c:42:05:9e:
45:01:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:17:26 2024 by rpki-client on console-ams.rpki-client.org